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"}], 0x22a8}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 967.813424] overlayfs: unrecognized mount option "5pperdir=./file0hvC?.ݔz&\i#zx!U [ 967.813424] M0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0xffffff00, 0xa, 0x4, 0x800, 0x2, {r0, r1/1000+30000}, {0x4, 0x2, 0x6, 0x6, 0x81, 0x6, "35a47c2d"}, 0x2, 0x4, @offset=0xffffff7f, 0x40, 0x0, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000003c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 968.277848] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) getpriority(0x1, r1) [ 968.626628] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 968.640272] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x6c01, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000254cea42ffe4eedde8590b8254d26924328f9b8afe06faded36ecf98c7f63d331f6882c0b25a22fe0e83ee5eb9dbd43368aa51fbe7a70786da36c177ab1a60957572f9e06fad8410ea6815cd49e1d7cfd7610f8948798f8181ac3bc2d98c8577329ef7958824aadb54bdcb3f4af8744e25596b7f9fafc4541548cc533ab3361eb037d8e524428bc81cc85832f1f7d46713f49a7e4badbdd2175c704ba56667f3f87d17eebe9c5a7a682a9bd4b3f1", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x294, r8, 0x620, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x74}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) sendfile(r4, r3, 0x0, 0x100000002) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000040)) 09:24:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="2f644576000000000000000200"], &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000004c0)={0x3, "a0ec20"}, 0x4) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 969.024302] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003400)={0x0}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r6, @ANYBLOB="ddffffffffffffff1400120067650000040002004a8c1b6a238e3c4a2aaaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac810d9ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d7070000000000000000"], 0x3}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400f5ff000000000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="498a2c607954395396ea755dcdfbebe1863637b337dcd1d8ec01e253e0ddb3bd8f842a3704dc00000000000000000000000000006a27b252d38680485d8288f9db3d5c"], 0x28}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x1f19, &(0x7f00000006c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:24:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000340)) [ 969.171226] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x40, 0x3, 0x1, 0x4, 0x2, 0xc, 0x8, 0x1a4, 0x38, 0x339, 0x7, 0x76f, 0x20, 0x1, 0x1, 0x7ff, 0x2be}, [{0x3, 0x20, 0x3eb, 0x0, 0x1, 0x7ff, 0x0, 0xffff}], "a3e856b9fceef1a8eb5a557701d97e1e51548e54560a32843a61447361fa2e8be86c7b7580185eb8976242af05459eb2cad7479d2dd9454c3921c82f04a9de66d57bfb6833306ddd07e52d5c9a7de9840e1bf3bdb98f143b5e3f513b6473402634479ded89ee0965e8c66f7c9bc157586fae7fae8fb6c02f16dfcbca6ef48910af15ea2a776a351ce878267ce8a265715a079530195378e08f05ada39af2920d3fcc52104526bf33203cf9ed83245e0852dca4e0a31ee221f35c15b72b1baaeb0c", [[], [], [], [], []]}, 0x619) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 969.406316] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYBLOB="f5cab7b599e705e36305523515b8c349904f0b598a4e68857ac0b4dfee27b72f074f18e7dda8b139b80e7cd93254e6771257814e10ead4a251fc2cb27061ec0d69b169a6509d29", @ANYRESDEC, @ANYRESHEX=r6, @ANYRESHEX, @ANYBLOB="07acf590f05c897a3a70343e8ecdf71bffde7f5aaf1e8bfe60044c485cc74e3ee3dac38fecde1d12e7551cb0178eccb33989a752ce638f5ece2a260edc8991ba0eb2ffc5194ab1b9634773192a0ea55d84", @ANYBLOB="02716964dbb2fbdd8045791a992779a447bdd53ab8d91249c34f48e12e1143f4092bce03eb164bdf0ea4ee559d85ff72f27804d2ff1ab5c7e12d9bc4", @ANYRESOCT=r7, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYBLOB="738073715887a59e081296efacc0a2993696a6ad63b06bb3d460dce20645e5fcc57cd7394fb7befad5680c8ccb15f01f580d4edbb5dc52cfb030c5214c148488d87f6b0750dda575fe8ac3155a03db66e214dba0f070f22ec552a7d3755072871786c2f114c37cf50c8333808a96151d75a7e7ecbc917200ff88df78ff45aaf77d7024e7f024526a4f74f7eca2a9d8943024b0741c", @ANYRES16, @ANYRESDEC=r2, @ANYRES32=r4]], @ANYRESDEC=r5], 0x3}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f0000000180)=0xfffffff9) [ 969.614259] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="767f006c99177d1d3343847c031fd65ee50000b54e9ec263805cff351ec787da50a522e806c3d7e4484a5fe9752cb802292f04015376aa8e19dfe29b5b9b77f5ac471195c52adc59c3a8fad153d94c39a6512cfab513527090b36796c84a39f7b2db52f607fd891593e29fda8aa100000000"], &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030303030303030303030305f434845434b2c666f776e65723d00000000000000000000000000000000931396bc4e15420a8fd0d3d9475a61d9f369eaeb05800eae14da4870f3005f0990723c9fa7733e521ef2c74cd840a4885465ccb82fbbaecc69d539e8f8a3b4eb59f7944a2be9ebb7279b56add37cf67920f0039a82510d7b067780137d3afe242561d335b2cc", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f00000004c0)='.\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000340)={0x0, "d59eb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 969.720518] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) creat(&(0x7f0000000180)='./bus\x00', 0x80) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYBLOB="2fb65680026bd76a487453a1c0294f1c321a09db92a91d2356f14552daa6587d83cddf77338a0533432f5edf3326c33f1c21098fba0a894817f43e1cd9c444f4db5ec6c7b291d3babec29693a07ccbf11567b7825fa08f25a9ad3c052d7f8006e0af8d0516d34831b7fddb4b82d26bda99fcbdfd462d4e5047e28de84a3e909ca20acb906f76970d06d0225c8e4f5565af4e44138f1d202250bd1438037cb4053eb79139280d0dcaa84b9b4ccedb11940ddabba21d0d1eb48c4fa87a6f80e57900d4eb76b423"]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 970.221589] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 970.328732] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 970.349281] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f3765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570700a0434dc6ce012bc6865726469723d2e2f669b40696c6530b97cdb69837c09cc70180f53e12a49b774798d04c880cb10285f886182eb52840bf60ad3b63760bf65d03cbe0256a009dfed74c8e11f1e68361ab4951387375ea8cc71aa006495640c22b0d6"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000440)={0x3, "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"}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000004c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x4}, 0x14) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRESOCT, @ANYRES32=r1, @ANYRESOCT, @ANYRES16=r3, @ANYRES64=r1], @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRES64]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @loopback}, 0x3, 0x0, 0x0, 0x0, 0xc00, &(0x7f0000000340)='ip6erspan0\x00', 0x8, 0x2, 0x97}) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 970.662610] overlayfs: unrecognized mount option "lo7erdir=./bus" or missing value [ 970.710489] overlayfs: unrecognized mount option "lo7erdir=./bus" or missing value 09:24:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir5./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[]}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 970.976091] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x1}, 0x10854, 0x0, 0x0, 0x9, 0x401, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, r0, 0xb) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) connect$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) [ 971.120449] overlayfs: unrecognized mount option "workdir5./file1" or missing value [ 971.170018] overlayfs: unrecognized mount option "workdir5./file1" or missing value [ 971.209459] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000340)={0xffffffffffffff01}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) accept$alg(r1, 0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f2f6661be536b3c72478965726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0xffffffffffffffb6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0) 09:24:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@x25={0x9, @remote={[], 0x1}}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d307830303020303030188b667b40cfbff04845434b2c666f776e65723dd227f54de88c7673d1ae02a3883db93ac57bf02eb38c3889b7874106a9f1c2825da16578a089df13b4e357e228946177218b810666737ee5308c0ea804f16ac3a440cb6af43585a97ec64e89a8fa9a1f61240fb2a33fa7fe026df7375194b449cefa480b1fd87a18c2b83ac70d9a01ee1fb985b46a560438af6b088295a7c075c56f899f", @ANYRESDEC=0x0, @ANYBLOB="b06cec34bf1b06006b506154bfffdceec9cfbfd2a3a37a3e7c1fe4e3fa8ea418cc3ec3a95c58d052343e5b8b6ab085fb50fab000f02aa4f407dae4723f7ddeea277c1e672bd45965e58237299be9001f2560493a3447797cbf5a4f38d77f77ef90b11bb38ede262f178a27b2138598c4dba1a59cabfbccc14107022d6f47f0243c2fdd1c3e4219fa6942cd580d29b51d35b12790b61390b86760d5e850053763e475457fe9e74bd7a2fcbe6c65173a8bb6d354764c2c508cabb3e42550a2dafb5414b2b4749f0028cbebbeaf5541c988ee4d50b9d660f8d1c6522a4964a96a884590fa6d662c04415dae35e7ef42cc5aefe9e217a9b74ff073c3bf44", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 971.492330] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1000, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="022000000100000000005600040003000000207ad33ba2bfb22b9be4b91a2e1a56b13f8fd9b9d73bf23ee3", @ANYRES32, @ANYPTR64=&(0x7f0000000480)=ANY=[], @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR64, @ANYPTR64, @ANYPTR64]], @ANYRES32], 0x7, 0x2) setgroups(0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e753d7463702c706f728e243078303130303c3030303030303034653245434b2c6629d01b975e776e65723d", @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000, &(0x7f0000000400)=ANY=[]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, 0x14) [ 971.543209] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 971.580836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 09:24:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000300)='9p\x00', 0x80, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f0000000240)=""/81, 0x51}], 0x2, 0x3) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x86000, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYRES64=r4, @ANYRES32=r5], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') setuid(0x0) r1 = geteuid() syz_mount_image$iso9660(&(0x7f00000004c0)='iso9660\x00', &(0x7f0000000500)='./file0\x00', 0x3, 0x6, &(0x7f0000000880)=[{&(0x7f0000000540)="3d2ee829902c5f4cdc0c7c7ed0e5b8cdf91f33fa183ad1b55b98d6f635460e4b034f715f1d260d5c33e199603f799a183886726b847d0ae4cda10f593d86b3ef35d9d484729c891978c56a30e69a7815366ed553c99b93615aa23aaace7c1f5500382059d8ab63f020990db93baee4", 0x6f, 0xfa9}, {&(0x7f00000005c0)="f6fb25c4c9fcba773594d9fc82c61feec6824be9cf975be821a82c69d383a5b4f742d3071eea2953c3644f9cd402b9e1f878929cf3da00cfb5919a4481108b441cd12081343022fa", 0x48, 0x9}, {&(0x7f0000000640)="57ef103d4967a0eb486cae3cdf435089654d084a84e73d999e4e798b591bae59cc22292011dad79b9248396e49413c163ed3c44b8f0b8784ff356676f340238a2daf129768ae711550bc4420b47fac32abc83b2e973fe2fbda29b2492d70c1ba15dc691ea559726837042ebf278abbf228b471a8d3997bf14b6fcc9b4f39a33aa183b9ff33ae042f08c861d26558e88d07a5a2555c6c43c870d15ab0ac275994b18943524c0a44a77d81c70c81920a618ac17666b0bcee964c60c5086690bb88f9e818cf7898bd569854c1a7a4e3b0cad84ed27e6aedbc8d7d6c8ece328543474a48da78085b880a306f4de34f2fa943c6cffd32cdef3c75", 0xf8, 0x10001}, {&(0x7f0000000740)="180443c20fa8c270ff8a869ad2d3", 0xe, 0xfffffffffffffffc}, {&(0x7f0000000780)="45e1703465fd4191bf6ef4adf9101cc49e95528b89063dcd3ec9ba97583fb9069300c6632f02b097c4b46298715fdeb845a0cb5711abd501aaa5c2518c501412c2f2a5a720a2ce8f9e152f2124a35b96a0f011cd5369e09c5d9fcff79739fc0bb1f710bd06fa19c99e24696f687603c0307d30cf2d3bd3814e497040f4eae41d425ef1f2f2fec5", 0x87, 0x5}, {&(0x7f0000000840)="15393ce7a4cb72ea7dddb52d888079985b5547f7eee0e5338fef3e432422b5e04bd4271cbfcc49867175882a094155552c87f2306cd834432efc", 0x3a, 0xfffffffffffffffd}], 0x80, &(0x7f0000000a80)={[{@sbsector={'sbsector', 0x3d, 0x80}}], [{@euid_gt={'euid>'}}, {@smackfsdef={'smackfsdef', 0x3d, '-em0eth0-(:em0E'}}, {@smackfshat={'smackfshat', 0x3d, '/\\nodev'}}, {@fowner_lt={'fowner<'}}, {@fsname={'fsname', 0x3d, '&%GPLposix_acl_access/&@*em0vmnet1&bdev#'}}, {@uid_lt={'uid<'}}, {@smackfstransmute={'smackfstransmute'}}, {@dont_measure='dont_measure'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r1}}]}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 971.962209] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) sendfile(r2, r1, 0x0, 0x100000002) prctl$PR_SET_TSC(0x1a, 0x1) [ 972.063702] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:07 executing program 1: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x6c, 0x4) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f77656564697a3d2e2f723da5e02e2f66696c6d30"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="0e52f4f6c4c51adf8d7aedb41833c0f8936cf855d7ec1b82cef0d6e57032d76d7cc8c73fab215f02b081f479928f5afa6ef64a98b4a0ef106bf3faa857320da2b58c90bb6bb446c418f7434a8e2f8db87667ffe3b8c79f0a2a1eefbb81bb35d01cf1aecda77546f465009865e9c188bd4bd13490580563403b21ebdfb58fb7a35dcde60d7838af79b7bd62e85285a28d6f042de8d5e6343e0782b57bf7f0ac23ec3c595d60991e78fda192ec41ba39aa031feb9c637b11883c9fa7635ec25b1786d9515fbebcb2034ac765a64b7513d3e4b2899c2e934d3cc6c3bd063fc1f3", 0xdf, 0x41, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000340)=0x7) [ 972.226834] kauditd_printk_skb: 17 callbacks suppressed [ 972.226844] audit: type=1804 audit(1587201847.642:169): pid=4933 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1362/cgroup.controllers" dev="sda1" ino=15844 res=1 [ 972.310267] overlayfs: unrecognized mount option "loweediz=./r=./film0" or missing value [ 972.369697] overlayfs: unrecognized mount option "loweediz=./r=./film0" or missing value 09:24:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000004c0)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000540)='./file0/file0\x00', 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="2f7165762f6e756c6c621700926d15d7cfc0"], &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x20) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000180), &(0x7f0000000340)=0x4) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRESOCT, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x81) sendfile(r2, r1, 0x0, 0x100000002) ioctl$NBD_DO_IT(r1, 0xab03) 09:24:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/132}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 972.880800] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000540)="d85ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a05000000000000000000000010008107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637a51d482394f2181e31ff307a2ace003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc1, 0x0) r1 = add_key(&(0x7f00000004c0)='.dead\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="496818e18b91d718a0c1aa3936f8a1ec4a59d06463ddc2f1f237543bfbc292a07eeeb7b66be2da4a988d8504d79eb1f1cb3b7c962f3a64f625ab5df84036e66092c98602140b665e08bc5894060426a21fad4a1a768abe245142f5e763854a6da8034972e8fef3de6aefda3a17b22f8fb93b67f1cf290433b9258ee41954575e52b580178269093a907dd9f54849eb43ec2828aee7a2b08cc08b8a863acccf", 0x9f, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)=@builtin='builtin_trusted\x00') mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 972.979356] audit: type=1804 audit(1587201848.392:170): pid=4967 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1364/cgroup.controllers" dev="sda1" ino=16122 res=1 [ 972.987083] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10040) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 973.052469] audit: type=1804 audit(1587201848.432:171): pid=4966 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1364/cgroup.controllers" dev="sda1" ino=16122 res=1 09:24:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x10d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x1}, 0x158d9010e012756d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) socket$inet(0x2, 0xa, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10100, 0x6, 0x104}}) ioctl$RTC_UIE_OFF(r0, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYPTR, @ANYRESHEX, @ANYBLOB="00000000000000000a0002000180c2000000000008001b00000000002be1031b90d3557085edf3dae8683be5a8ae44c93b7df9f89a10b6d80b958c7052e64883b156a6ecbe87d104cc63956193d84e9e0c5030ec4f1888f88359e5cccac203feca7dffff0c4cea9eadc5ddacbfc1ee134016b3e670c7d2110f054ebdcf8baa35faffffd09890e60f6623d142ffffffffff56891e006825f57df5d0fe4efdccc919c37b1a93ae9441644f76fde236a36cbe5e1a5d0e00004ef68c643d8a23c8ab320953081e734e0bbb83aa5a7b55a2e4b18794b5f160c9f16f09c99cad6530f23d000000000000000000b18215a7fc3c195e8d75aa41c6a62df8eba77ad10bda52d341f9e657e2200e8467f0ad4b3bf2e58c451f621118cef7db922444e45a958630faea30034b2846f46812c80d84ca16a09cad062635c7a9b6720600b2aa194fed1942e611131ae6e7"], 0x3}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x41}) [ 973.395142] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="cf0f54cff99787c926223eddef23e4ef86050dc2a2de7b3723383b19e05f0061a2ace97e0aa2ca29043c4c4c7505de16adb109805249ed19e965420851e84f43bdc5c980e0726c5cb62d8410446a26cc2056f1138c9d7f3639f365348b78f3cdb2d76b8ce6ca947ef64add5c565b5136ed4f944e2b76bf4f0c6b261dc972d86a788b63a81c7517f07c9b5acc17f24f1daf76c2", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000440)='./file1\x00', 0xac) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000040)=ANY=[@ANYBLOB="144d939460a17810ec54274a3bbe1417000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 973.475298] rtc_cmos 00:00: Alarms can be up to one day in the future [ 973.531707] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 973.537432] rtc_cmos 00:00: Alarms can be up to one day in the future 09:24:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="000000000000f61b643e", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000180)='./file1\x00', 0x101000, 0x111) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 973.592329] rtc_cmos 00:00: Alarms can be up to one day in the future [ 973.643094] rtc_cmos 00:00: Alarms can be up to one day in the future [ 973.661110] audit: type=1804 audit(1587201849.072:172): pid=4986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1365/cgroup.controllers" dev="sda1" ino=15770 res=1 [ 973.716232] rtc_cmos 00:00: Alarms can be up to one day in the future [ 973.723966] rtc rtc0: __rtc_set_alarm: err=-22 [ 973.774405] rtc_cmos 00:00: Alarms can be up to one day in the future 09:24:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 973.933264] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x10d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x1}, 0x158d9010e012756d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) socket$inet(0x2, 0xa, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10100, 0x6, 0x104}}) ioctl$RTC_UIE_OFF(r0, 0x7004) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYPTR, @ANYRESHEX, @ANYBLOB="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"], 0x3}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x41}) [ 974.105545] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x406002, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) sendfile(r3, r4, 0x0, 0x8) 09:24:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xd) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) unlink(&(0x7f0000000340)='./bus/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b7065726469723d2e2f66696c65307fc73012b5039dc665a55e7f2084ca900a3ecb81e5ab7b707561d6923210e9d0f6ef625865ace8d796f566dd778780d3c55fd0b744fd2f927b033c98340033106c35fdf35df2482a90ab5f6da67e4af1e9ffd038a9b82c5881e306a0136a514523532a697ff7c550cc8f565b2d5690c8fe35e8bc116b2c1c3e7a1343bffa1b168a5337c0beee45a2d2f0935f849fa6faae600e5d83c02670ba1f8800a025720629c7e33c2e85fb82d341403b583a88d0b7b19fb4d3bf430eee6d2db6d6a1315229d14fc1d4c5a302612451ef2ea58d7546"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = msgget$private(0x0, 0x90) msgsnd(r1, &(0x7f0000000180)={0x3, "38312d317e16abfa87ba4699d49936187c3119b920c881aa31ed0bf13d89d384fd1b"}, 0x2a, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 974.198930] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='cgroup2\x00', 0x108094, &(0x7f00000003c0)='9p\x00') rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 974.291871] rtc_cmos 00:00: Alarms can be up to one day in the future 09:24:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x40, 0x3, 0x1, 0x4, 0x2, 0xc, 0x8, 0x1a4, 0x38, 0x339, 0x7, 0x76f, 0x20, 0x1, 0x1, 0x7ff, 0x2be}, [{0x3, 0x20, 0x3eb, 0x0, 0x1, 0x7ff, 0x0, 0xffff}], "a3e856b9fceef1a8eb5a557701d97e1e51548e54560a32843a61447361fa2e8be86c7b7580185eb8976242af05459eb2cad7479d2dd9454c3921c82f04a9de66d57bfb6833306ddd07e52d5c9a7de9840e1bf3bdb98f143b5e3f513b6473402634479ded89ee0965e8c66f7c9bc157586fae7fae8fb6c02f16dfcbca6ef48910af15ea2a776a351ce878267ce8a265715a079530195378e08f05ada39af2920d3fcc52104526bf33203cf9ed83245e0852dca4e0a31ee221f35c15b72b1baaeb0c", [[], [], [], [], []]}, 0x619) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 974.353697] overlayfs: unrecognized mount option "workperdir=./file00e^ ʐ [ 974.353697] >ˁ{pua֒2bXeזfw_зD/{<4" or missing value [ 974.388087] audit: type=1804 audit(1587201849.802:173): pid=5013 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1366/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 974.441482] overlayfs: unrecognized mount option "workperdir=./file00e^ ʐ [ 974.441482] >ˁ{pua֒2bXeזfw_зD/{<4" or missing value [ 974.537216] rtc_cmos 00:00: Alarms can be up to one day in the future [ 974.549487] rtc_cmos 00:00: Alarms can be up to one day in the future 09:24:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b8c9be009d3b7e12bbcccf07c6b2cb1930fb5b0797021b79e5e65da8fab0000000002ef746d7016ca2f929c97a51de728da6635374b18d7f88532939995a0f250041d9b64e2e1873d5c4db1c46f6a29bd9fb6b8dd7a946a68a66b3652f", 0x5d, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5450000000000000500ff00000400000000fc7718"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 974.570813] audit: type=1804 audit(1587201849.832:174): pid=5013 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1366/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 974.601027] rtc_cmos 00:00: Alarms can be up to one day in the future 09:24:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000500)='\xbfD\xc6j8`\x04?\xeb\xf8v([+\xfc\x95<\xae.v\xd3\x80\x1cz9oNq\xd7l\xfe\x8ax:\xc7\xd8\xfb\x06\x81\x94k\xfb\r\xf3G(NcQ\xc4\xaa\x8d\xadx\xa6]\xa7\xc2d\x9d\xee\xa46\xd5\xb5\x06\xd0\xfd \xc7,`\xfc\xc5\xe2\v\x95\xd3\x96\xd3\xfc\xab\xfbHM', &(0x7f0000000380)='\xd4\xfc\xab\xd4\xd1#Q\x03', &(0x7f00000005c0)='overlay\x00u|\xf1\xdb\xef\xab.\xb0\xb2]\x11]d\xf16\xe9J\x9c7x-#\xeav\xa1\xc4R\x93\x90\\I-\x1a\x949\xb0\xc8jy+;\xf6\b\xeb\xab\x9dN\x9d\xc7pO\xc8s\x86\n\xa8\x9e\x19,\x94(\xdb6\f\x14(G6\xf0\x97Zk\x9a\x9f\xe5\n0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000380)={r2, r3/1000+30000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 975.525904] overlayfs: unrecognized mount option "wqrr=./file1" or missing value 09:24:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x15a0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000500)='cgroup\x00', 0x100000, &(0x7f0000000380)='\x19\xcc\x94!') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000004c0)={0x8, 0x7}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @sack_perm], 0x2) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 975.595552] overlayfs: unrecognized mount option "wqrr=./file1" or missing value 09:24:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), &(0x7f0000000340)=0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[]}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 976.127199] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x15a0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000500)='cgroup\x00', 0x100000, &(0x7f0000000380)='\x19\xcc\x94!') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000004c0)={0x8, 0x7}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @sack_perm], 0x2) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x15a0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000500)='cgroup\x00', 0x100000, &(0x7f0000000380)='\x19\xcc\x94!') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000004c0)={0x8, 0x7}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @sack_perm], 0x2) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b54500000c4ac64f24a61c00080000050010b787527b94a539521d7aeb7058d0cf61b1bbabe008a7d6fedaac960758a1a1abd8da4ffe24a16c8a3e61130065d7440fb77ef3d8a985bfd5adfda48fe5ff2ca02b277d80395f8515594537b51e91884db3aaa1398e181490c9284a80b3e4804a7ef9d86cc08ee319fe4158bf649841d05a4f0c18c77afda57465c4eb01deee6645fa56cb2751db08f89bfbcc3c7abecb2a16b2260dab38826a93acfd2f2374e7b8c02ff3e5c513be81171b32f4ba7302433bfa201e06597aa1d557285105f2098cdc50b03c8382cec38002083aa39b5d1e7d56225300"/247], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) lchown(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) 09:24:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 977.106023] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c8e6818, 0xffffffffffffffac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000180)='D', 0x1}], 0x1, 0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6204732c776f726b6469723d2e2e66cbb9d949080000000000001edd0ca9000000000000"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0) 09:24:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000041c1, 0x10084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0xfffe}, 0x0, 0xffffefffffffffff, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="801a009b0e0000", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6c6ff0f3000069723d2e2f6275732c776f726b6469723d2e2f66696c65000000007065726469723d2e2f66696c6530cf7d09a1859a2e7e4d664cdfa05241ab5e0d8431fc4e3d4b90b5ebafd11ee1788ca29a5d46a3161213a02878b3aab211e20f9c84125f5c41911af744a26a831462cd03ffe682a0d33b73e9f7158d9000f7938fe6866cb8a56717959e0c0eb67223effe5bc869c1b2e644482935cb602062ed3e101623370c64bfaa9e2ae8f54c228a1b8dc3cfe4b2ab4ee5940f30b1cab1ca9efb65e291"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) prctl$PR_SET_FPEMU(0xa, 0x2) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 977.462800] overlayfs: unrecognized mount option "lo" or missing value [ 977.469009] overlayfs: option "workdir=..f˹I" is useless in a non-upper mount, ignore [ 977.504349] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 977.529561] overlayfs: unrecognized mount option "lo" or missing value 09:24:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f00000005c0)="db75b579b831e6e31414f3b3f74cd8e8984a9ee28b5bcf487d0965a08723eaa79e2afcb961f98ed9ca055c69012150eeebb4b0cfa1dfbe720dfc9cd6f4bd733cd869669ade2313890c5c5befa14e5547f8246702c185763e14c563e805fa7eca388d00aac926b219d668ca636cee753492508b967fa7ebf05c72d2993e7f27c47985a4061f41219d82fff3b8164587708854018c2686e5b661d2a96f06e2e1aa", 0xa0, 0x20008818, &(0x7f0000000680)=@x25={0x9, @remote={[], 0x3}}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x1}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000380)='cgroup\x00', 0x100000, &(0x7f00000003c0)='\x00') getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') mount(&(0x7f0000000180)=@sr0='/dev/sr0\x00', &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='nilfs2\x00', 0x840014, &(0x7f00000003c0)='\x00') 09:24:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x79f, &(0x7f0000000040)=""/49) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 977.653729] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723c2e2f6275732c776f726b8469723d2e2f66696c65312c75707065786469723d2e2f26696c6530aca98db9fc47267e40423c79a9771ae80583a4b2b05e88c0b3c0445f75b8e96e10da4089e4717ead157d6340e93db567d9f81fddb0824e7af7503b05feb87bb9d739fcc8807ce49ec135f0fccb02c176e470a4eca8dd8f17a512dc"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 977.809056] kauditd_printk_skb: 11 callbacks suppressed [ 977.809066] audit: type=1804 audit(1587201853.222:182): pid=5148 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1373/cgroup.controllers" dev="sda1" ino=15765 res=1 [ 978.073922] overlayfs: unrecognized mount option "lowerdir<./bus" or missing value [ 978.121529] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 978.167281] overlayfs: unrecognized mount option "lowerdir<./bus" or missing value 09:24:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000340)=""/30, 0x1e}], 0x2, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="08beb5e75d0b07e847a071") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000000c0)=0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x6, 0x0, 0x1, 0xff, 0x6, @remote}, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x80000000) [ 978.540408] audit: type=1804 audit(1587201853.952:183): pid=5174 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1374/cgroup.controllers" dev="sda1" ino=15861 res=1 [ 978.591342] selinux_nlmsg_perm: 4 callbacks suppressed [ 978.591354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.625231] audit: type=1804 audit(1587201853.992:184): pid=5172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1374/cgroup.controllers" dev="sda1" ino=15861 res=1 [ 978.652842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.681320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.720843] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 978.750449] audit: type=1804 audit(1587201853.992:185): pid=5172 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1374/cgroup.controllers" dev="sda1" ino=15861 res=1 [ 978.784331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 09:24:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000340)={0x5, 0x7fffffff, 0x7, 0xeeeeeeee}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 978.833743] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 978.847102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 09:24:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000004c0)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000000306010100000000000000000200000705000100070000000900020073797a31000400000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0xfffffffffffffe3f, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0) [ 978.874090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.893167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.906364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 978.979152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 [ 979.041459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5172 comm=syz-executor.4 09:24:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r1 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64=r0, @ANYRES64, @ANYRES64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESHEX], @ANYRESDEC, @ANYRESDEC=r2, @ANYRES32=r1]]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765060000003d2e2f6275732c776f726b6469723d2e2f66696c65310c75707065726477723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 979.240969] audit: type=1804 audit(1587201854.652:186): pid=5174 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1374/cgroup.controllers" dev="sda1" ino=15861 res=1 [ 979.362276] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="f7000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 979.467804] overlayfs: unrecognized mount option "lowe" or missing value 09:24:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="866f775a726469723d2e2f6275733d2e2f66696c65312c65306c696b160542e54955dfa0b65dba131abe687055566b076700"/63]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) [ 979.531416] overlayfs: unrecognized mount option "lowe" or missing value [ 979.542262] audit: type=1804 audit(1587201854.952:187): pid=5206 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1375/cgroup.controllers" dev="sda1" ino=15861 res=1 [ 979.552281] netlink: 227 bytes leftover after parsing attributes in process `syz-executor.4'. 09:24:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xc) setreuid(r1, r1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="bcee4208f5ceaee0730c35a1067ff6f66d3e169d0a36a0a32d42cbda1efd23b48bc6222686853c63dcd71ce0a122b970e90faff8c47c2a7b0103060940a69736cbad6df2920a81851c42de550a3e140736c67cfcc8c0fd10712b98dfcb53f796a85b4a52c906de46b0ee", @ANYRESDEC=0x0, @ANYBLOB="0c659569643e67eb7adcecb59eb3e0f3ea42d5920f25993889f5d0d2ca8c45e73a1f1f46ca4ce798e9b4c7dbccc77f7af8e8357817fc3bff2c826638a80aa38fad9e8f78f6ecbd237e8fe7102e6152b9ea8fee9973de6aff18c636f22ed6fd7df127c793dd8598eeef9db0bdb87dcc5ac8d249375e52139e39aa14b8e99a2eec49110fe2e38c842e26a3ca73c91b4468a5", @ANYRESDEC=0x0, @ANYRESHEX]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)={0x2}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c706f723556bde1b29265d23030303030303030346532322c66756e633d4d4f44554c455f434845434b2c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 979.790946] overlayfs: unrecognized mount option "owZrdir=./bus=./file1" or missing value [ 979.873246] overlayfs: unrecognized mount option "owZrdir=./bus=./file1" or missing value 09:24:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x5}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0xe, 0x0, 0x76, &(0x7f0000001540)}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYBLOB="e0e45a8e3d6c0ecb2acd4b79f22a835e2462fd8d6c5d3a04dd800f6e70a5f1081eaab8ae576ee04860adb1902b360506e686161c03e78b51e8e7bb16bd9a1a0704208abb4f32a5ae104526e557d1d77ccd41893b5bf7774c58b482522aa51d27ed557a9d0df74d967e07d69926736890d98fbed9e4c8fe71afc5d3fd682cfc761a72181c19298f1fa003c55527603dcbc7e112928fc6ccc8eccdb0fe94f95315c9a5c4a71e4d3c4b0cc4a753a5cbb56d3e658588207fe3889c2ec1a019f5cf61cf61b83a3fe086550e9fe6ea386f5eb0d7d9124c8e9ce0baf293522eec189d0974b6389624fbecdcb4f3b229cad305419baa9c13f7b0f202bd6494f4cfbb36f0c5493dfa95d4eab6715d2f1b94863c792126be60b40af1727f1fb412774d40bc67153623571bf11fdd1bfbce2998807df479f27934f3f28e93d7cc891537d11c7501434a0b54ed80ed28e1e611f1416283cb842e195052ed96fac8f4aada675c648920978462fa449eff4e8eb2ff6ccea1be94313b225858eb66c69b0ea93773c56ea42bb7114056a25a698b23e011bfb5e8eef744f41afeef73c5d6f8cbc4f0abf4afe0e67349dbd9bf4b28d10e9179910100fd6d846d3b45daa9b7ddf3e175a44051fbf6d22c7743a19560de5f5a9fd8a18a51bfe06620477980fc5df4d81b8c2ada206284cd73d57a0eb5ce6d59ecb1c0c6300d8383fa9f57e690498e308bc79fb696e782ebb5e3b3e52366f35e9a865ec5132ac3807c9cd3cdc4403ed297dafc5dc0d24d6422b64d304774fcea0b6db53ec0a55768aa50e236847a8b9f555ed1cafa49d422f5d26e59503517c3f0ea7e935dacd872e2509e3f0c1ee3492247dd59c29a271b7dbbe274bb1e2d388bbe61178df5bf67d8c4ad6ebe34a3088b795a6dec9f1b6bb9059df6f1d214b01df9db8aa7124262283d5e7127253de716df3fa43e2ae9a32a4415591ca7cf479232342f0ad75ec0a1905c1276cdef367ece0c9f0ef5ba1aeb421b73d02a4583ba05631935c3f443db3d169efe8cdbd57411f0bea47a4f0007230dcea85d9abf9ffd9fbc69e62f4cba408679a3af228223927567e47d49cf8fbf47aa8b5cfefc6ef14c27d716cb0a87e4a554fe1835542efb3e9804f4b1188e1c82bd06349eefa970ec49eb5cb20856b5097b1d6011065ec1a64b63bc92331d9d020c005880cd3bfffbe5c1ab3bd7e05a6762290c6c07883928782931968ee33f80b9d4935b5d6b48053d0ecc8b999b9d6ff4eb085eeaa0a1f5856fa8e6de44f3bf7b9756b520fc046bd4a1df91aafe90d1260c29a430251e3c2696fc00c250511f44821866a06ae1646dbd8e7dd739250d0a03f60f2cac1c52ccb46dd2a35ea1deebc4763abed73c623dda314e12065209b7827962b84929a98ed046034be635a7a2c1df9e9b8a5d00e80298954eef7be9e3c773228a6b94ac7fa3dd2f0a267a8cae4ab1409b14259273d469ea84146a69ff877f3d74a1ae42481ea942424e287905325d72d42dcf869058e45bd160079d7f1afa0cba7bd34a0dab6f2a25ddd1c3bf4a8bbafdb81f87d659e73f8cd3748392558f880b94dab691cc4396f1ba943f8ac91c6b068ee7fe3ba3ecb2132bb70c45f91265f23767a5c6105b31ad50e8cdb668e8f3695855e0b62ac611912f272a44f622f60a7fcece661d7502877d6dea225c23ed941ba3b29ad26e6ee313ef902b63666289e7483b2608e5aafa931b99c828302f9beb0d34dfc173d4ab670b0f9c1f687ec53732a94eddf69c0717a448fb8996297fb124b451a113a92c8945a7cec7ffc6b57bc9013e12eb3bbf9205d4058b97bbb5bd9fc3b757019dd19a828c027c39e8bf6920c4a0698f83d6c730de3a2acd03f87904c8780b13ed1d7f65c777920e32e7e61d8e2a0ba7e463f56dd645ddb4baacb71b90b4f3dabce566634a666e6c0edd8f2d866c54a3b6cf4c1b1f0fef548cf7fde1028da7984e1ed55fe83ea3fe719902cc7f033054054030ae74137998010f6224b19023c36388635a64eb1779ee512bfea14472bcfa2e2f31332a9c76f0320a7ab38f11584de2e1e5d0132ec82b75ce431cdccc68fd522293a865bfbec4cdd1ed8649f3937f4597021085d0871bd03ce093a388a751199e2787a7f3d5897bc9a3064a2e6fa19b97e9ca55242dc74f9eee4a4a4da1d6fa7da88929e62e9f3197df37becc90c375e59f0fd8fc9ac367d10f6c77242aa5fc72786d5178b6f7c0fccb5d9ed1b7a28a28d0e760b38c864c21239298bf0f5ed3532607895630a9bd45e60590c3a0f5d4dede519eb8003f2540639b339123e5e360f3129518af07220322a15bd53f28cb39b61aa78e2cc82da63f292137e9db9d474f651b9c16d39e69885cd8e78c266648cd2d8f0d85527de2ad315d004ee941592719ae76d177a670b2d4fb2bb149cea3b2c489ba2582840cc10c80d3a84907762070992f99ceb95dcd7fbfc97e7c28092fd8a27724b1fc3577b396a42441cf2e65b9786dc3f173251d96bd699a388140c86b7ec9e9e00849970923c031f61e09820b277812c2e2f251881db9bc85e9e90ed4ed9049b7867ad2053fa4778a56917f6838092c35ae7505ef2debf8d50c0882158dbaf77c2ef2a61a3b946ebfba2e71cb71f7dd0c3871d57533ab693be718faf5ce881de624874624187cff6088d9b3e4dd3573b5fcc5041af3352ff57f66edf68ecf016f7042c7c20aea5915f0fb18f04475912541316eb8353424075b020ec7f729cefeb9bbf7b3677fccef1bd41f120b43c831099873612538bd334fa5a48e881b84ae07d4f71f299ee28096e9c2c2b3dd461c7f650f4eb41822c61f675f5e1398a133d086ddd0af13cebfacd67e42513a79331320e607d65908aca52a9250d0f25b151c71c761087a64c867b273f308f5b91ceb83fd271b7b0e13d704d9953aefa38790260e2d5486b60ea77c927393ac54178973001bf9d323bc2259a10438c024fc728f08a877d53d1274348f290863437245d2f8f148aa350a56a3f9c6f09ebe2caa26bc20c2d58164b990a224dbfd274f7d03be05f1a93f754527e88ce078f8db860c317c3f1dda2b68f8d43f6e44c6c26b3ca06694c28de43ec1e379a4d0fbde4765c406774492f85b8109981d28d28c43a0c187760775a0cef926bdcb0b83ee726c34a6f3491da09443b73aa73822a7b2297653f568c7adba4c046950e0a574c2bf8e30859df3bf0e6ecd7afa2a6c3f9c59e2b5b73b39350779040d50d78df616c151430824424906cd4440c7a16a0286cf46c28dbac3326b1a76fdad2d773e28ac907dfbc4c5158af87473c5d4bd5de55da5cef7d302df18d75535ebb85d504c002796c01d15f3ea87121971fcb197228f25c612110ebe523d9f0ef3f2434bbcdddb1bb279a05413d9af203f0261a11ffcafd9d97f5b6b4dc8658fb425b4aec95009fea968349606c48f21950daea7518bfb5f6738f3e733ea0d62f966c0f5b41157dbfb02814712af8d547081dd334f1cdaf8b2e07f7a105577d8213b0ff61389c4da037668fd7a82dd03f33fc080b3768727dc223e9c0781394509a8a793e97aec813d4f7db7a9d23c48dfe205e7a53077c364a9a54ec11d35c5a3c92826fb930c4a35842b5509278c10511808968f8a22777cc55892eeaa5bcd5c4c5071d77eef6f616f3b591b2edc2adaf449f7a338fa44961e8ae57dea57880c66078ee3c22e55e1c592aeb59619a67064ec71713308feefc8c9bb1d7cd8e30ccd12ce08e9f12e4076da7570c630a803ad0e2ecfb905f797c08d7859ed6ee90fe38af2c72d2a045f908d02e7e03cf93c083c3e22ca6b02d2cc2456efa7c9c8e1b909203659347334a44a681bc31316c53cd806c7ad03a085310cd8ea0b767ef32fae885a0b3d9dce3444390bb37a52d5488b8dfad18fb58443ebad25630ebe7beb1a478ce5f2c745b74da695dbc1a88ad06a13d089e08043ca33bc788d4ce119dac04d4c6a37ee08f7a200d0cbb553ed75566bc6bd1b8352aa25f94e2fe4571bd4077b03c43015c09966ecd5a5e502057ef3039b4dd1e4d8281df5a61f982d0a7f680cb732697fe289de99534a6452b278a5a3e7c677e6911bfb9a28baa36a7efd5b0332c37710223211cf8862bd9f8576d0989e4fab7ee804a84690e7c3ded57beb37da5f3701bb5dd51871cd6134bdcd406f4f6cfb21d7616fa5d93d1527b29959893e49602c1fe7c00fde02c13ac593512cb05c20468542629ca5bbd10708098895e4a3c9b519268520b19a2cb58054d0cd840ae5161c299f920171432e788af755dd04d0381eb8d9f172b584a3cc2a936cd388455aff399e8191a23eba0e4bc61f242765dc83c511456b06e1bc62f60e10692762e9cf8872b25647a4d68ffd6c69f58a981ff9baa89f7b2c33d897dc55baf28beb0d37fe366e6e0febeeabac12dc7d87cf0f3356dfc6c8e368771010660e3c2ef5cd2987d8a0b6890f081cda9ea137f411ad6abc7104c1b4caf4838693eb8d543af3d67bc4007ae32f19ebd6e7a8178dbf0ded245dc4756d119dd31f728e70d4a3cd2046425302c9556d9ac45c24327ec2dde76a0f243cf3e4858c9f0acabd474750f4e9a2dd8cb6e6cd08d7625a15a18a60bc60b8d263d663d4b41737584fea9b6175a79fdf0e20833b990b4697fbaf0e44a6aa2c87733e6a7f37b4c8191f4906a205430ec9993b7e665dd54ac9c607fb7afe49a1b944a5b803f7e7518ecc27c7ea0d909efc51e284d5eb117f681ca7c5311d14c17d66d09a7a1f1a8a673b84401c62e568ce028aebaec3b224e1a0e45231c485a5cb4930b775bf16bfe2665e0712d96612585314c48252d15db378731dfdc5cc87a96c6bdcfd7e7246645e5278635790b6bf33a50ce6c98a0296afbe69fa8d3c689aa65fe63598ded983f6e87297350a1904e40d9b1c1d3c2b2ac0d9548557fedf969d671c07e6406844eaa96453f9e20438dedf5e6283e7a23c8d34576a8206b82a404a566c43d87000a9c11f736465a649ba26b5394f9f4f12b786eb57be4ac010ac6f544109d97b9604f7d0e6a5165006c488651d18913e07628075268ac552edcc5a7643faae02fb25e64d81bd60e6467415acc10c7f7d353296dde11093b050967d98042abbde037201bde15abca7c3eea9fe1304166f676b0bbd5fd43cd7da83872db7d8571ef76ae63f516a6207376e88eac6c08535e40acc3a8bd8ebac7e5e35d1277960e1c7dbdb5ded85377fdef110426bfaeadc3beff671711e002f32ec667ea3c21e45f4229acba1f9c3abd7a9914e91e1abbb570ac5f7a5ed15d1e2e74d85ab2d844a6858b6a77e0d2f9f961fad6f38e285e19f38fb56cf106ae6c5eca9d4e1e916d23091c8282ee54706320e706442422b81888e68ce0d97c2291cb7cbc38858c22ebfe75b530c9e019ec3d902ddef0665fdad15c6d5b850b53a8cf9a80ef2bc235bfb4eaad069102da3dfa4b2277e1b5c09179cb0470ae17633491cd8ea61d944d7cc20cdf75289af72bf711ab931107153dab38145648b86441a01592936c8cd2f8fb072aec3a2e305701602ed8b8d2320e4fe66603d9b0b1c4bdd278be1ad1214020cd2b6481b76e8fd60e30bbc38f8c9fe6ea00c7b0147b4e5ae8b8a6186845217c03012d45787ce31bcd8154155e600e6d974cc90279f8ef40761070da7a18e22b512d8d10cff6d25f7abcfd77d8b37c3dc76b46c4b95d80b01fcabedab28ea3ff2b05fae5fc62a1a6bf98f9d6bebad81eefbc2b56b4ee2ac92f4a5fd211cae777000ff0417b1c70d2952e8e1c484ecef983b", @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4020011, r2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) recvmsg$can_raw(r7, &(0x7f00000037c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/197, 0xc5}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/95, 0x5f}, {&(0x7f0000003480)=""/209, 0xd1}, {&(0x7f0000003580)=""/196, 0xc4}], 0x9, &(0x7f0000003740)=""/111, 0x6f}, 0x40010042) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendfile(r4, r3, 0x0, 0x100000002) [ 980.202962] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765766469727e98d7c2ce6e0e3d2e2f62757333065d94c5336a6a7222dd3034e6ee36473d2e2f66696c6531edb3707065724f3ccecb6f6469"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0xc8000, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000340)={0x4, 0xf800, 0x800, 0x7, 0x90, 0x24, 0xd, "61d295fc177d647b70f1e4c0232faec829991533", "4ba719be6f283789c368625e3414c90b10f8b8f5"}) faccessat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x800) 09:24:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 09:24:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4000, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {r1, 0x2080}, {r2, 0x2000}, {r0, 0x11}, {r0, 0xa046}, {r3, 0x1400}], 0x6, &(0x7f0000000100), &(0x7f0000000140)={[0x10001]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0xd, 0x6, 0x200, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20040800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) sendfile(r5, r4, 0x0, 0x100000002) [ 980.494366] overlayfs: unrecognized mount option "lowevdir~n=./bus3]3jjr"046G=./file1pperO0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], &(0x7f0000000140)=0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0xf61, 0x8}, 0x90) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) 09:24:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="078c2235", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 985.486783] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 985.515670] audit: type=1804 audit(1587201860.923:200): pid=5411 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1384/cgroup.controllers" dev="sda1" ino=15890 res=1 09:24:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=\x00\x00file1,upperdir!./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2}, 0x0) 09:24:21 executing program 5 (fault-call:0 fault-nth:3): syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 985.664090] FAULT_INJECTION: forcing a failure. [ 985.664090] name failslab, interval 1, probability 0, space 0, times 0 [ 985.692624] CPU: 0 PID: 5414 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 985.700516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.709882] Call Trace: [ 985.712490] dump_stack+0x13e/0x194 [ 985.716143] should_fail.cold+0x10a/0x14b [ 985.720318] should_failslab+0xd6/0x130 [ 985.724313] kmem_cache_alloc+0x2b5/0x770 [ 985.728484] ? shmem_alloc_inode+0x18/0x40 [ 985.733524] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 985.738999] selinux_inode_alloc_security+0xb1/0x2a0 [ 985.744130] security_inode_alloc+0x8f/0xd0 [ 985.748472] inode_init_always+0x576/0xb20 [ 985.752720] alloc_inode+0x7a/0x170 [ 985.756359] new_inode_pseudo+0x14/0xe0 [ 985.760340] new_inode+0x1b/0x40 [ 985.763712] shmem_get_inode+0x75/0x750 [ 985.767694] ? __d_alloc+0x5bb/0x9b0 [ 985.771430] __shmem_file_setup.part.0+0x104/0x3c0 [ 985.776369] ? shmem_fill_super+0x8a0/0x8a0 [ 985.780697] ? __alloc_fd+0x1bf/0x490 [ 985.784530] SyS_memfd_create+0x1f6/0x3a0 [ 985.788747] ? shmem_fcntl+0x120/0x120 [ 985.792653] ? SyS_clock_settime+0x1a0/0x1a0 [ 985.797072] ? do_syscall_64+0x4c/0x640 [ 985.801063] ? shmem_fcntl+0x120/0x120 [ 985.804973] do_syscall_64+0x1d5/0x640 [ 985.808882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 09:24:21 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x14841, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000340), 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, r0, 0x9) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) setregid(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 985.814084] RIP: 0033:0x45c889 [ 985.817282] RSP: 002b:00007f81f120ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 985.825000] RAX: ffffffffffffffda RBX: 00007f81f120c6d4 RCX: 000000000045c889 [ 985.832280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1991 [ 985.839566] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 985.846845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 985.854129] R13: 0000000000000be1 R14: 00000000004ce049 R15: 0000000000000003 [ 985.995511] overlayfs: unrecognized mount option "workdir=" or missing value 09:24:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) getsockname(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000040)=0x80) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48045}, 0x815) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x42c3c1, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x2004800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdnP=', @ANYRESHEX=r5, @ANYBLOB=',nodevmap,seclabel,subj_user=,user,fsname=mime_type/,\x00']) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000600)=ANY=[@ANYBLOB="09f37060", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r8, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYPTR64, @ANYBLOB="97561263fc153153a9b9656b953793af5288caaa60e89fa8e67c88e994b14cbc638935874694990ceaed65c7df75df05cc294e3679a139f24f27e7a77cfaafd4c2bcb9a8c6d738a72595f29259bedea57f6c52fdda1045fe6c9ec62a38a35f546faf078fc945ac9e8198032701114f50ef263965a0de7036e46e5248aea8b525766eab3b9a3f89dd6254ee1cb3cce187dc24aa656028d739ebbfa1b04a992b7a54042122466fc9b66a92428424bc7b09a79045174e5710ea82a4da04e4952c887390720f033f8517bfceaf3a450cc2ad9c27164ed9a73382", @ANYRES64], @ANYRES64=0x0, @ANYBLOB="a4cd658df3e02c7f9f104d", @ANYBLOB="993276f7f9c379b3f79774fda691fc90156c72a3606152d2b68070df09689cb42acb7ed7bbd646c7baab4f6af4cb99d584acfaa6772d7b9e0daa90656e0c54fcba7928dd26f39695ec0944804cbae726ecbf7f28292de38948811dca99d291b9e0d66ab1f89bebfb9a30883f280b8e5ac3b96cd95cf608665ba862f33632a88b6615b2f41907f4795e6dcf9db3ab3cf875c9b4496e2990d4c1ebd5d3c22ce68fad2828622edadad002d3d1eb47c97dc3e0cb4e285da580f81e2c126f1b8a674f1bccb16136c58067044e8d4eb08bb5655925823e819416e808a4", @ANYRES32, @ANYRESDEC], @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 986.051019] overlayfs: unrecognized mount option "workdir=" or missing value 09:24:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1411, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) [ 986.225836] audit: type=1804 audit(1587201861.643:201): pid=5432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1385/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 986.300195] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f8275732c776f726b6469723d2e2f66696c65312c757070cbae89c596cb64383c352e5565"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 986.352160] audit: type=1804 audit(1587201861.643:202): pid=5432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1385/cgroup.controllers" dev="sda1" ino=15986 res=1 09:24:21 executing program 5 (fault-call:0 fault-nth:4): syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 986.408345] audit: type=1804 audit(1587201861.653:203): pid=5432 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1385/cgroup.controllers" dev="sda1" ino=15986 res=1 [ 986.516980] FAULT_INJECTION: forcing a failure. [ 986.516980] name failslab, interval 1, probability 0, space 0, times 0 [ 986.579873] CPU: 0 PID: 5441 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 986.587727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.597097] Call Trace: [ 986.599707] dump_stack+0x13e/0x194 [ 986.603357] should_fail.cold+0x10a/0x14b [ 986.607528] should_failslab+0xd6/0x130 [ 986.611518] kmem_cache_alloc+0x2b5/0x770 [ 986.615686] get_empty_filp+0x86/0x3e0 [ 986.619587] alloc_file+0x23/0x440 [ 986.623140] __shmem_file_setup.part.0+0x198/0x3c0 [ 986.628081] ? shmem_fill_super+0x8a0/0x8a0 [ 986.632421] ? __alloc_fd+0x1bf/0x490 [ 986.636243] SyS_memfd_create+0x1f6/0x3a0 [ 986.640420] ? shmem_fcntl+0x120/0x120 [ 986.644320] ? SyS_clock_settime+0x1a0/0x1a0 [ 986.648858] ? do_syscall_64+0x4c/0x640 [ 986.652838] ? shmem_fcntl+0x120/0x120 [ 986.656732] do_syscall_64+0x1d5/0x640 [ 986.660634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 986.665847] RIP: 0033:0x45c889 [ 986.669053] RSP: 002b:00007f81f120ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 09:24:22 executing program 1 (fault-call:15 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 986.676776] RAX: ffffffffffffffda RBX: 00007f81f120c6d4 RCX: 000000000045c889 [ 986.684066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1991 [ 986.691447] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 986.698738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 986.712531] R13: 0000000000000be1 R14: 00000000004ce049 R15: 0000000000000004 [ 986.792598] overlayfs: unrecognized mount option "uppˮŖd8<5.Ue" or missing value [ 986.827081] overlayfs: unrecognized mount option "uppˮŖd8<5.Ue" or missing value 09:24:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0800d37af3c7544a38fc6e4c4373ea9c6bdd71168d0400", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="e272029e1bd833a29e682180859a9c91639afebf0e177702ee12747a9094bd9050348492688bc45ebabd376a2b152d4eff1809f7ac43c359bb68878e5883621a45601dca21b936d5f4526b1738423ba7f08a41c626021ee36feb84efd844a53fb5fd95ba36422221ee1252036828adb48ff068340408d691ada6909226f1b8da08a0cc7c1ac4ed403378f29357e9f2f8896039c6809bc96ff11d67"], @ANYRES16=r4], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", ""]}, 0x14}}, 0x44041) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r7}, 0x10) [ 987.022352] FAULT_INJECTION: forcing a failure. [ 987.022352] name failslab, interval 1, probability 0, space 0, times 0 [ 987.046691] audit: type=1804 audit(1587201862.463:204): pid=5458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1386/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 987.109329] CPU: 0 PID: 5459 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 987.117173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.126534] Call Trace: [ 987.129134] dump_stack+0x13e/0x194 [ 987.132780] should_fail.cold+0x10a/0x14b [ 987.136942] should_failslab+0xd6/0x130 [ 987.140929] kmem_cache_alloc+0x2b5/0x770 [ 987.145086] ? lock_downgrade+0x6e0/0x6e0 [ 987.149249] getname_flags+0xc8/0x560 [ 987.153060] ? SyS_mkdir+0x210/0x210 [ 987.156779] do_rmdir+0x84/0x340 [ 987.160157] ? user_path_create+0x40/0x40 [ 987.164309] ? fput+0xb/0x140 [ 987.167425] ? SyS_write+0x14d/0x210 [ 987.171142] ? SyS_read+0x210/0x210 [ 987.174774] ? SyS_clock_settime+0x1a0/0x1a0 [ 987.179192] ? do_syscall_64+0x4c/0x640 [ 987.183174] ? SyS_mkdir+0x210/0x210 [ 987.186914] do_syscall_64+0x1d5/0x640 [ 987.190821] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 987.196020] RIP: 0033:0x45c889 [ 987.199222] RSP: 002b:00007fba56ccec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 987.207042] RAX: ffffffffffffffda RBX: 00007fba56ccf6d4 RCX: 000000000045c889 [ 987.214323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 987.221604] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 987.228892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 987.236176] R13: 00000000000008aa R14: 00000000004cb5c1 R15: 0000000000000000 [ 987.282774] audit: type=1804 audit(1587201862.493:205): pid=5458 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1386/cgroup.controllers" dev="sda1" ino=15868 res=1 09:24:22 executing program 5: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc0000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'veth1_to_batadv\x00', {0x5}, 0x7}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@codepage={'codepage', 0x3d, 'macromanian'}, 0x9}]}) 09:24:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c66756e633ddb064b737a1359dd61044d4f44", @ANYRESOCT=r0, @ANYBLOB="b686419adc185e6e816fecac1356ccd0825c74bd9d075a2dcb2ab070df2a542e1209104525bf526c357cb806d22de221cc339b93000cd2c9e32c79f8eb9d24c77972888ca9e6bcd036a02aca6fa97f6cffe7375a68cc1efe8e45ccf89f13bfaf3e056652b26acade787dd860322da27e5d0d6fe85c9382891558107244c3822c77aface209e3b1f19363710e56841fe7123ec6448ef4ebc033b91109348569f88bd2990ab90608094d7b61a690c3b3fa305379062fd3a976112fe0aefe1344dbc27f7417a0952758d931ff8fbe4393a154659f2ff5be29197b06dfba651014344fd6fdfa3eaf5bed9e8d07c99098e8e41e425784", @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES64=r1], @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b646b723d66696c65312c7570706572648a1d3d2e2f66696c653049ac6fbaed492f1ebb55cfc2b8dd421bbb5d5aa71b2c9a8e17afa2667fba31fa1f5bb9f699bf0b32b53ed8765135231fc7fd00122a85cafcb7283ec8b33d6c68fa9a73d25586a5d32a1b05329bde3db401b5fccb56d4af3133e55606a8857ec536f4cfbdec6ff7c0d6ebed3694dac158ed37ced7b52736e70c00"/177]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) [ 987.434693] hfs: unable to load codepage "macromanian " [ 987.440433] hfs: unable to parse mount options [ 987.559150] hfs: unable to load codepage "macromanian " [ 987.565343] hfs: unable to parse mount options [ 987.635631] overlayfs: unrecognized mount option "workdkr=file1" or missing value 09:24:23 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) [ 987.679533] overlayfs: unrecognized mount option "workdkr=file1" or missing value [ 987.876846] hfs: unable to load codepage "euc-jp " [ 987.881994] hfs: unable to parse mount options [ 988.015681] hfs: unable to load codepage "euc-jp " [ 988.023949] hfs: unable to parse mount options 09:24:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getgid() socket$inet_udplite(0x2, 0x2, 0x88) chown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007accc7f0478d53688f110f5b3d85c2097b5857a4e306cbb76b2ce30ef43d5e9029f5a22150bb0337ada074888d9b2755259483eb8b7b76a826ed2257a0302d1a2c9944b4301d82ef88d2e61404f9dd015a7ac38b3fccbdf110b712891315cec01fd29fce2ba9b0e572eff678d831b927"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0xc001) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="09f9c45d65a391df3fe2b393473f46dfcea8979fe1fde2314d8b9446ce28536a932ebc0381075e9665359f499f8a31892b60d855c8c19841c4b5fd35b85c0c522bf8d737e59d646dedf105736097235e461297a5b1ab582f4ff650f778f350c34b4ca9b52c38c482ae9a1732396180b51963df3d5339b088563d4f99cf786d92fb978fe3db181cc05fbba7b7b3efed29b15cf79b8f841ba0a2d8d3979939e15219cd750a16ef", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000540)='./file0\x00', 0xa5) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776b64697281d9cc9b0fc2fa712c75707065726469723d2e2f76696c6530f588a89c21bcf8d0c63aea691d4e0fc77dcc642d8a8728a4af669a954c278ad543ed3de4fdaae12d3e1c1cc514e2ac8f0d1c2500d949b8002b8d9c970a508f296ec2495637e95cbc00804bbfe43fb0b85f3ea2976cf092af05b8191e722fed0fccec0fb2c42702faf9ab8745475920b0916b04b91e7c7e9ac012ad47f400c529aa0f736956d9cd405436b74a969e17e681774680904346"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x81}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40800) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) ioctl$TIOCSBRK(r5, 0x5427) [ 988.480996] hfs: unable to load codepage "euc-jp " [ 988.486292] hfs: unable to parse mount options [ 988.491084] overlayfs: unrecognized mount option "wkdir̛q" or missing value [ 988.497659] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 988.540661] overlayfs: unrecognized mount option "wkdir̛q" or missing value 09:24:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x82) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="f93340773b07324af6d956359d0a323fd853bf7a4b98883ebb2b7fa381bffe6a33f4f059461d7e2e4f630ace291e0216fa14e2d7361554fcf6a41590ee2cb1c680be3d33532155a64c400000292513bd24e46f9d7df59a83f1755ac488da10474271d228a0613f94afc97d05a0c507aabfc607851d474fe6369eb1adb59c89436609a99b178f2682b60166addf705640d67afb452b446587c3bfcd9d1404538fca36d741084906b3c5c9f8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x151) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x4000, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/dlm-monitor\x00', 0x80000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000720eda686d3c55203d56fee17999520996d98363ec820059499378a8adacff6f0800b61315b18000000000000000e7631cdd9df9ff1bffc28f914d67486fb3d029f11ab8b722ae9a5076", @ANYRES16=0x0, @ANYBLOB="000900000000000000d9bf62ae3b0002000000"], 0x3}}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="68fe02a89f7e3605000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendmsg$sock(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="89704c49a227a0fffad3c5b0a1534e2ae6409664301717a28e115e15ad0ede8799f143b7ddd0268fa2b942e000dd735213ea4ab320a51ece8d33a188431dfd169ebbfcd05a1cd540e0e717bda989da4b8c80e25208bf49695567743748efb67b6936a6e32f0e4bd6a86ae56a6aca3f81105f0193584d43a70737357ebea6cb7591b9bb71d8424c0ee2805c7865e245dccc008840f590fbac18e6b25ec3dd6b40377cf5", 0xa3}], 0x1}, 0x40800) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000200)=ANY=[@ANYRES16=r9, @ANYRES16=r8, @ANYBLOB="b545000000000000050010"], 0x3}, 0x1, 0x0, 0x0, 0x4000010}, 0x48841) sendfile(r2, r1, 0x0, 0x100000002) [ 988.593883] hfs: unable to load codepage "euc-jp " [ 988.598946] hfs: unable to parse mount options 09:24:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x3080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8023, 0x54e, 0x0, 0x0, 0x0, 0xffffffff, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f00000004c0)={0x134, 0x0, "43d36b52f68a73e8c619785b1ab5dffb58933c621387cfcc", {0x400, 0xdf35}, 0xe79}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b0569723d2e2f66690500000000000000726469723e2e2f66696c6530"]) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000180)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./file0\x00') 09:24:24 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4d6f6465706167095ae4f432534d9fcab0b98602557d312aec24"]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000180)=""/52, 0x34}], 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) [ 988.772591] overlayfs: unrecognized mount option "workir=./fi" or missing value [ 988.795925] kauditd_printk_skb: 2 callbacks suppressed [ 988.795936] audit: type=1804 audit(1587201864.214:208): pid=5544 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1387/cgroup.controllers" dev="sda1" ino=15763 res=1 [ 988.816026] hfs: unable to parse mount options [ 988.868185] overlayfs: unrecognized mount option "workir=./fi" or missing value 09:24:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x8, 0x0, 0x41c1, 0x810, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x101100, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000380)=0x7) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') [ 988.956803] audit: type=1804 audit(1587201864.254:209): pid=5544 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1387/cgroup.controllers" dev="sda1" ino=15763 res=1 [ 988.992894] hfs: unable to parse mount options 09:24:24 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x3f, 0x1, 0x27, 0x4, 0xe2, 0xff, 0x2, 0x8, 0x1d, 0x3f, 0x9, 0x5, 0x81, 0x4}, 0xe) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="636f646563617b053d6575632d6a890900"]) [ 989.095364] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 989.101400] audit: type=1804 audit(1587201864.294:210): pid=5538 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1387/cgroup.controllers" dev="sda1" ino=15763 res=1 09:24:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getuid() mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000500)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000}, 0x40005) [ 989.176540] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 989.215629] hfs: unable to parse mount options 09:24:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d69d6303030303030303030303030346532322c66756e633d4d4f44554c455f434845434b2c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB="610ccf8aeea55442", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469725ec2c1616a75fcfb6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL_GET(0x22) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 989.572314] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6c6f776572644e723d2e2f6275732c776f726b6469723d442f66696c65312c7501a965726469723d2e2f66696c6530db5e568c1c3e75e652c9619db6ba6f8b3d63759a07361dd04321a2f042f27b3cd3fd93f56d2a2b8ed66f0e4e80d6af74342eec937ae74d32f3eccf4563d50c8c6451ab1e525edf24ff90cc88a12d6a5ef23557ed6a554f370bfec44c3cc2a1179509df69342b691aa89712cb18cd49fbdfda42509d8902d6e9c8e0f429b5e6aae15d997303834dfbcf5fa936b00396402d22ea72bcae073099b9d0c3221cd31c5199d628e4e2c6a49140d0bb5bd2675a8fd9d69577d5ca4599e24554f1c4a31b3b838e36a3b722031777aeb151841e8bc9df771c5eb9e585c4474fb539e5a13c9e10cbdb291035e830e727880b3db3cd7c76a64f1cf4ac499bd823004f0c8bf720b4ad6ad9b14e3f6e274b0cfd8628"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = accept4$inet6(r0, 0x0, &(0x7f0000000340), 0x800) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 989.608489] audit: type=1804 audit(1587201865.024:211): pid=5586 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1388/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 989.651389] overlayfs: unrecognized mount option "workdir^ajue0" or missing value [ 989.702795] overlayfs: unrecognized mount option "workdir^ajue0" or missing value 09:24:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000180)={'team_slave_1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) socket$alg(0x26, 0x5, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r2, r1, 0x0, 0x100000002) [ 989.897266] overlayfs: unrecognized mount option "lowerdNr=./bus" or missing value [ 989.967914] overlayfs: unrecognized mount option "lowerdNr=./bus" or missing value 09:24:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',@']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 990.029285] audit: type=1804 audit(1587201865.444:212): pid=5602 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1389/cgroup.controllers" dev="sda1" ino=15868 res=1 [ 990.128133] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000180)) [ 990.383347] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 990.439895] overlayfs: failed to resolve './file0ce!|tH_Oώɞ|pdʒIbWX6*|ﺎZy0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/20, 0x14}, {&(0x7f0000001740)=""/208, 0xd0}], 0x7, &(0x7f00000018c0)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/139, 0x8b}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/174, 0xae}, {&(0x7f0000003a40)=""/60, 0x3c}, {&(0x7f0000003a80)=""/234, 0xea}], 0x5, &(0x7f0000003c00)=""/97, 0x61}, 0x3}, {{&(0x7f0000003c80)=@ll, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/20, 0x14}, {&(0x7f0000003d80)=""/145, 0x91}, {&(0x7f0000003e40)=""/64, 0x40}, {&(0x7f0000003e80)=""/53, 0x35}, {&(0x7f0000003ec0)=""/1, 0x1}], 0x6, &(0x7f0000003f80)=""/58, 0x3a}, 0xfffffffd}, {{&(0x7f0000003fc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004040)=""/202, 0xca}, {&(0x7f0000004140)=""/124, 0x7c}, {&(0x7f00000041c0)=""/201, 0xc9}, {&(0x7f00000042c0)=""/21, 0x15}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004340)=""/136, 0x88}, {&(0x7f0000004400)=""/239, 0xef}, {&(0x7f0000004500)=""/241, 0xf1}], 0x3, &(0x7f0000004640)=""/92, 0x5c}, 0x8}], 0x5, 0x10040, &(0x7f0000004800)) accept$inet6(r0, 0x0, &(0x7f0000004840)) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xa) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file2\x00', 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x14}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x902, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20008840) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0xb148, 0x2) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000400)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[], @ANYRESDEC]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 994.024817] overlayfs: filesystem on './file0' not supported as upperdir [ 994.052808] overlayfs: missing 'lowerdir' [ 994.083024] overlayfs: missing 'lowerdir' 09:24:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7c6f7665726469723d2e2f6275732c776f726b2f81bc62487f1163070f1369d093278bb666696c65312c75707065726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) sync() rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 994.421342] overlayfs: unrecognized mount option "|overdir=./bus" or missing value 09:24:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) sendmsg$nfc_llcp(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x27, 0x1, 0x2, 0x5, 0x1, 0x0, "6ce5f216e2c0c25373ea9ddaa95e2dbe63e79167c1ae1fe16d5c0cb8b3e68aa8d63f54718ca9ea055e66727d78c685c2ca8b45202d79d4c8b0e646b1d29557", 0x31}, 0x60, &(0x7f00000003c0)=[{&(0x7f00000004c0)="616d7415da8055219fad145716af872e83fcbd4861d331f5c0cea5a3ff98fbb1f478b3d6837a1340ba5a447b5982d170325a640f4d7475dbf54224a1cbc7bd6fef744c446b1324073a4c4dd104d590c5", 0x50}, {&(0x7f0000000540)="25f2d6d289dbb54099b5547e7e4a97f4d9ba579dd4771ee9fe8e87b0bb80ba8862c054da0d10a737d23e06df800553d3e9ff075b0025c6265f2fe6f2a93766b22e0c345d191a5bd2f604806c666f714adbdbf927056632c3c05c515702dbdd0cf6e17fa5c397b462f4fb53ca95f4e25d83cdafce78151816ad0fe54ddb81f19aae3f9e1c1c635efc5a3e4ff2cf66d77b47781f87a8017a06ab9f629aa92a95525915094b3f246c63fb526187d9a4ec77f100f7a7f1795014a8603f7a5f9c859f554521840c1da133d04525cc778ebf18957d7139b060074309d64195264ffd3f63a126d318346ce235dc057e9dfcb42fb52a382cd9e8676d", 0xf8}, {&(0x7f0000000640)="313b87940805e3c8afa09e0979ae99376ed9f3069dc819156b0ef2cc16caa28330e85a8c1f6557d4ebb9e9c27565f975884a6229b5ef9ce8d7ed2c23b6e0ff6f258e6c51d67e945eec750dc1e2", 0x4d}], 0x3, &(0x7f00000006c0)={0xe0, 0x10a, 0x3, "8ac89d000fe127df1541096076ae5cef50bec0b6ac3e8486a64216f056f03ac353031d8fff4285f8cfde585c40de9a2f8e9383e6efc4ee5d9aa31b2ec942898149572a0342526ed45563c4c4244462e50bc8a925486368cc44692294a1f53b60336b18b6ca566a341a508f63e4d7f30e89b23ca48893fd1a23beca44023cd78945bb3c83a02d51dd7f5d1967eed5d1e2c5594a0ca17049bf0eedd4bf0aefe64600920835931c23b7513354e77a0c8cfcd82349986d89699d92a8fbaae38638ea4f4eb3608f5e2166f2d6b04eff9b4a"}, 0xe0, 0x1080}, 0x8810) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 994.482870] overlayfs: unrecognized mount option "|overdir=./bus" or missing value 09:24:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2200, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x1134, 0xa, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_SET_USERDATA={0xe0, 0xd, 0x1, 0x0, "a093d8a4db59eb4685210a2301131a75f66ea52e779458d7b133bb5c2ec5a49ef3538b45787b064acc9f367ea6b28278bae582abf1daa940b53a7bd436085cf482c3d2e41b314c7a820dab313b27bdb7dd5921298dc823c2512fb60fa36ddde1f96697e54bfdf7e968c2edb6c76f5fce12f1f68fab452e7fab12a8c18e7ece9fcb92a1f0ca1857a1ff4591bdfeaf6fe0feab4cfec04c389348bd3fc9d003d47ff343990ce86cc5e9e5ad9f3742de247750cbb8c6d6faf07182425c483cf212e38721526f4e48e5940a1dba319a7a76754898b6e856355154710829ea"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x37}, @NFTA_SET_POLICY={0x8}]}, 0x1134}, 0x1, 0x0, 0x0, 0x4840}, 0x810) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="9adb743028aba49cea7c819e8e486359c4c30c7d0500000000000000bc8899997564ee8e99e29117b9886196cb40280b1286a5d144e554de8c1efb2860f018d2924180fee6d147d8d1349f75d05a79ab1ba5fda73682cdae934b7d56fd86df2df5a7ab355d2cb6959eb0fd2b9242de7042122752305c", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x803, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 994.935961] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x81c9, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000180)={0x4, 0x100, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="90324b3d962bf6c527e840ba298158a7fc15ea7457b9614a8bd85c87d6ff841e8797e18978f16262453516bdcd95e0c0ef040911253546f7b6a2e8856f7926d60874a79c479855b2b5081315dfd0ec6eb1c039e25797ee33bc1bd5d203208568c92e57d925007516a4142659f047b59df0508d7964b3b74429ea2ef55b04e8253e4b97100ba71e00", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='low`r\x00\x00\x00\x00\x00\x00\x00\x00s,workdir=./file1,upperdrr=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 995.147340] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 995.226140] overlayfs: unrecognized mount option "low`r" or missing value [ 995.246774] overlayfs: unrecognized mount option "low`r" or missing value 09:24:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c65c569643e", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 995.437083] overlayfs: missing 'lowerdir' [ 995.491625] overlayfs: missing 'lowerdir' 09:24:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000003c0)={'TPROXY\x00'}, &(0x7f00000008c0)=0x1e) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000380)={0x16d, 0x2, &(0x7f00000004c0)="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"}) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0xb15, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 995.598800] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x50000000000, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x845d) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f776572640400a3aaed3ba0d168d0e082f505745b69723d2e2f6275732c776f726b6469723d2e2f66696c65312c74707065726469723d2e2f66696c65308ebd5d1fe441463147aef68145b510"]) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x47ff, 0x8}) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x1a000) recvfrom$rose(r1, &(0x7f0000000340)=""/74, 0x4a, 0x141, &(0x7f00000003c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @bcast}, 0x1c) [ 995.848474] overlayfs: unrecognized mount option "lowerd" or missing value [ 995.860071] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 995.898788] overlayfs: unrecognized mount option "lowerd" or missing value 09:24:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c657569645deac75b43547bc0873e3d2509e85be952d97191399d5899b40fdf4b7fa08c33d7a2ffc4fb9f4cf59908c162c0d1666b79a34c30637747677c17d1c156", @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f0000000400)='./bus/file0\x00', 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e2HECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f00000003c0)='./file0/file0\x00', 0x100) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 996.234963] overlayfs: unrecognized mount option "lowerdis=./brkdJr=./fil" or missing value [ 996.300404] overlayfs: unrecognized mount option "lowerdis=./brkdJr=./fil" or missing value [ 996.339000] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x15, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4840, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x2000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f00000003c0)='./bus/file0\x00', 0x62) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000180)=0x6, &(0x7f0000000340)=0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000380)=""/32, 0x20, 0x10042, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 996.592115] overlayfs: unrecognized mount option "" or missing value [ 996.627791] overlayfs: unrecognized mount option "" or missing value 09:24:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322cf79221b965957f1d1d0219cd9de4bd1966756e633d4d4f44554c455f434845434b2c666f776e65723d", @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYPTR, @ANYBLOB="a85e429aec55c546b30b0a6983ef41b4e56b6d0134162b5baec4a57a89ac0e272f46d08a15f2f202dd80425529b46c0da98c239915abea2dfd8754676cebb0f4ca30c9646fe908f49a210c336f48540df223deb2fd4b", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32], @ANYRESHEX, @ANYRES64, @ANYRES64=r0, @ANYRES16, @ANYRES16, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="319df7a72fc6b1a166783f542ed366878f6f90b7225248c1df3e4db57bc001d28892dcc2d0781e4ace98505d871559cbeaf82050ff3b62fca0af7ba61e5ac0340f71c83ad6580023de85a9e5a75e67f7a74ef37d55316523b2ca6b4bc4654395d2812bc3f3b2d4991ca4e920e5e9b4288f1f70bb03a2cdc4e3543c7aea197500103706ca7cc8ca5526a88b13587a701b15fba0dc28f0fe3132bfe0438aa03d40a9a9e43b068f9509ffda2ccf19a43261b824", @ANYRES64, @ANYPTR, @ANYRESDEC, @ANYRESOCT], @ANYBLOB="f499f3a1d22172f280aafc24306395ce161850bcbdcab14aa93341277b1bd7439657b98dfdf8ac951034adf088b6e3f7f0b8facd60423f6b1d2a9b8ad3ac54326b55ddafc0c27f1ef9daa97a8c0949f8509b449c1b63b4407f8d8c3ad7ce28c7ff9779f65e4f7f8ff9109296c927f065f080209b05b6b958bd914b2a4c7bc5f9547e2ad8b47423f3f882a20a0e8ebd6c4306c943f78b", @ANYRESDEC, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYPTR64, @ANYRESHEX=0x0, @ANYRESDEC]], @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYBLOB="18e447dd8019df4604c7cd9f2e77a4dc113d0a9340924f7681dc4120f7835c975cebb15073f8", @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESDEC=0x0], @ANYRESDEC=r1]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 996.789355] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') write$P9_RMKDIR(r1, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x4, 0x0, 0x7}}, 0x14) [ 997.010895] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chmod(&(0x7f0000000340)='./bus/file0\x00', 0x4a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)=""/4096, 0x1000) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 997.257783] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 997.408256] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0xaa4088, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="42590d68affd5b", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="3f4869ae17b4b806e4369c2712c2143b89a47a235d96b15db0194b0cb9340a66ae", @ANYRESOCT=r1], @ANYBLOB="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"], @ANYRESDEC=0x0, @ANYPTR64, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f, 0x56000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000380)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c0077657264070000002f6275732c776f726b6469723d2e2f66696c65312c75704e1e726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 997.636852] overlayfs: unrecognized mount option "l" or missing value [ 997.668930] overlayfs: unrecognized mount option "l" or missing value [ 997.706691] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c56f00500000000000000965ae91f", @ANYRES32=0x0, @ANYBLOB="00000000000000000e0000000a00010072737670360000000c0002000400060004000600"], 0x3c}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000340)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYBLOB="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"]]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xdfffffff}, 0x0) 09:24:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000003c0)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 997.990264] overlayfs: unrecognized mount option "@" or missing value [ 998.014565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 998.038024] overlayfs: unrecognized mount option "@" or missing value 09:24:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,Gorkdir=./filele0\x00'/47]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 998.071096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 09:24:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus/file0\x00', 0x40002, 0x81) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000340)={0xfffffc00, 0x8001}) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 998.222754] overlayfs: unrecognized mount option "Gorkdir=./filele0" or missing value [ 998.264597] overlayfs: unrecognized mount option "Gorkdir=./filele0" or missing value 09:24:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75daf7bef2ed79707065726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 998.467783] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 998.520748] overlayfs: unrecognized mount option "uypperdir=./file0" or missing value [ 998.563054] overlayfs: unrecognized mount option "uypperdir=./file0" or missing value 09:24:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x2f, 0x2, 0x0, 0x3f, 0x0, 0x7, 0x1442, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x7}, 0x20, 0x3, 0x9, 0x2, 0x6, 0x401, 0xfff8}, 0x0, 0x0, r0, 0x1) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f776572e469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530f36a5d9543520f782b4fd06e5917fc0a8ea9b39dd01a005502d8f0afd16ff8c12631dc1eb58f3c30104f3a2ce748841b63b352635a1ea88b53ee"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 09:24:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x84, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0xd080}, 0x40000) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c66756e633d4d4f44554c455f434845434b2c666f776e65723d45fab68373ceb545264bbb831a33478ba373a07f06a37bd273d34f5e8edc09607de5d29b1d1e30719c2e619dc2a2d7f7707a4645bd889ffae801c48da48a25ab75786eb7f59c2a2fc342e946ab4eb8ac4e9a2b46594b3673d6ec928269a900d49af1543ec119b5cbc9e2abf7bb95599c7e5b41fb6f621537342959b72c942e691040d1db89746a27c5", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_mount_image$cifs(&(0x7f0000000340)='cifs\x00', &(0x7f0000000380)='./file1\x00', 0x20000000000000, 0x2, &(0x7f00000005c0)=[{&(0x7f00000003c0), 0x0, 0x2}, {&(0x7f00000004c0)="f0c965acc2dda93aad33cc74193dce2fc056c2f3f916df8051175d009cdb41f1b486678b69bbc98655a3e6e9bd5afddbf45fdea328351a46025678677ef4d0e55cd8bbeb82887f80021a42c72955ab24aeb08284ee385f485efcaaa5c8aea2cdeefb8ec4f2a9ec97367ad9a7955a70edcb6824c8e519fe07b7b48684423f833494786f8231089889f44d73b53882844912129ac3c413be26c4b3684cd4a279cb74db0a80831adf458d1968cad851f3bbb749c358677cb87cff9614751a19a22fef8aca5a1931a799135eb94d", 0xcc, 0xfffffffffffffffe}], 0x2840800, &(0x7f0000000600)='overlay\x00') mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 998.854836] overlayfs: unrecognized mount option "lowerir=./bus" or missing value [ 998.896665] overlayfs: unrecognized mount option "lowerir=./bus" or missing value 09:24:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000180)={0xffffffffffffff97, 0x3}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x24) semop(r1, &(0x7f0000000440)=[{0x4, 0x9, 0x800}, {0x3, 0x7}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="9809c09f97572189", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 999.049113] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x9}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 999.227530] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xfffff00000000003, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r1 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRESDEC=0x0]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 999.473808] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 999.508480] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x18, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xffffefffffffffff, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euMid', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x1000000b, 0x0, 0x0, 0x10000000, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000380)=@random={'osx.', 'vboxnet0trusted\x97(md5sum-}\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0]) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000340)=0x1e) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 999.747710] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYBLOB="01d31f7f31f709875c975c83a6f774d35e8f814c8c392be174a40cf2c2d39e2a50e83a5eddfc09f9ae51f430a853b88635355a58592063fbf785ec3be884b7840677c0886c3a7742a3f9c479f2888e92b65ca92ea29e3eaebe81263ce6737f969af9b30dd4ec4a208773d4c3d355518a017a146ac175095f2a7446ea7985117e2ac4cc7fdc8ac8958dfc7150", @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x3ff}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:35 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1000.072738] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1000.074040] FAULT_INJECTION: forcing a failure. [ 1000.074040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:24:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, 0x0, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}}, 0x44010) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00022abd7000fddbdf2503000000080008005d1414101400060000000000000000000000ffffe000000108000c0000000000"], 0x3}, 0x1, 0x0, 0x0, 0x810}, 0x44000) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r8], 0x2}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 1000.144640] CPU: 0 PID: 5929 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 1000.152499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.161862] Call Trace: [ 1000.164459] dump_stack+0x13e/0x194 [ 1000.168189] should_fail.cold+0x10a/0x14b [ 1000.172352] __alloc_pages_nodemask+0x1bf/0x700 [ 1000.177034] ? save_trace+0x290/0x290 [ 1000.180845] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1000.185868] ? find_held_lock+0x2d/0x110 [ 1000.189944] alloc_pages_vma+0x310/0x4a0 [ 1000.194047] do_huge_pmd_anonymous_page+0x386/0x11e0 [ 1000.199175] ? prep_transhuge_page+0xa0/0xa0 [ 1000.203591] ? pud_val+0x6c/0xd0 [ 1000.206981] ? pmd_val+0xd0/0xd0 [ 1000.210355] __handle_mm_fault+0x23ac/0x3280 [ 1000.214796] ? copy_page_range+0x1d70/0x1d70 [ 1000.219313] ? find_held_lock+0x2d/0x110 [ 1000.223394] handle_mm_fault+0x288/0x7a0 [ 1000.227464] __do_page_fault+0x4bc/0xb40 [ 1000.231547] ? vmalloc_fault+0xdf0/0xdf0 [ 1000.235621] ? do_page_fault+0x60/0x4f2 [ 1000.239639] page_fault+0x25/0x50 [ 1000.243105] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1000.248735] RSP: 0018:ffff88804a537c48 EFLAGS: 00010202 [ 1000.254102] RAX: ffffed10094a6f00 RBX: 0000000000000004 RCX: 0000000000000004 [ 1000.261379] RDX: 0000000000000004 RSI: ffff88804a537cf8 RDI: 0000000020caaffb [ 1000.268657] RBP: ffff88804a537cf8 R08: 0000000000000001 R09: ffffed10094a6fa0 [ 1000.275933] R10: ffffed10094a6f9f R11: ffff88804a537cfb R12: 0000000020caaffb [ 1000.283209] R13: 00007ffffffff000 R14: 0000000020caafff R15: 0000000000000004 [ 1000.290512] _copy_to_user+0xaa/0xd0 [ 1000.294244] sock_getsockopt+0x3ff/0x1730 [ 1000.298411] ? sk_get_meminfo+0x440/0x440 [ 1000.302568] ? find_held_lock+0x2d/0x110 [ 1000.306633] ? __fget+0x201/0x360 [ 1000.310096] ? sock_has_perm+0x1c0/0x230 [ 1000.314167] ? selinux_tun_dev_create+0xc0/0xc0 [ 1000.318871] ? security_socket_getsockopt+0x83/0xb0 [ 1000.323896] SyS_getsockopt+0x18e/0x1c0 [ 1000.327881] ? SyS_setsockopt+0x1e0/0x1e0 [ 1000.332036] ? SyS_clock_settime+0x1a0/0x1a0 [ 1000.336454] ? do_syscall_64+0x4c/0x640 [ 1000.340457] ? SyS_setsockopt+0x1e0/0x1e0 [ 1000.344615] do_syscall_64+0x1d5/0x640 [ 1000.348523] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1000.353722] RIP: 0033:0x45c889 [ 1000.356914] RSP: 002b:00007f422171dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1000.364631] RAX: ffffffffffffffda RBX: 00007f422171e6d4 RCX: 000000000045c889 [ 1000.372038] RDX: 000000000000002c RSI: 0000000000000001 RDI: 0000000000000004 [ 1000.379318] RBP: 000000000076bf00 R08: 0000000020000100 R09: 0000000000000000 [ 1000.386599] R10: 0000000020caaffb R11: 0000000000000246 R12: 0000000000000005 [ 1000.393880] R13: 00000000000001ea R14: 00000000004c41b6 R15: 0000000000000000 09:24:36 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1000.633417] FAULT_INJECTION: forcing a failure. [ 1000.633417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.660419] CPU: 1 PID: 5943 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 1000.668261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.677626] Call Trace: [ 1000.680227] dump_stack+0x13e/0x194 [ 1000.683877] should_fail.cold+0x10a/0x14b [ 1000.688039] __alloc_pages_nodemask+0x1bf/0x700 [ 1000.692723] ? refill_stock+0x270/0x270 [ 1000.696715] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1000.701744] ? lock_downgrade+0x6e0/0x6e0 [ 1000.705907] ? get_mem_cgroup_from_mm+0x157/0x460 [ 1000.710762] alloc_pages_current+0xe7/0x1e0 [ 1000.715094] ? mem_cgroup_try_charge+0x3ca/0x670 [ 1000.719865] pte_alloc_one+0x15/0x100 [ 1000.723803] do_huge_pmd_anonymous_page+0x561/0x11e0 [ 1000.728930] ? prep_transhuge_page+0xa0/0xa0 [ 1000.733356] ? pud_val+0x6c/0xd0 [ 1000.736733] ? pmd_val+0xd0/0xd0 [ 1000.740105] __handle_mm_fault+0x23ac/0x3280 [ 1000.744528] ? copy_page_range+0x1d70/0x1d70 [ 1000.748947] ? find_held_lock+0x2d/0x110 [ 1000.753034] handle_mm_fault+0x288/0x7a0 [ 1000.757105] __do_page_fault+0x4bc/0xb40 [ 1000.761178] ? vmalloc_fault+0xdf0/0xdf0 [ 1000.765250] ? do_page_fault+0x60/0x4f2 [ 1000.769236] page_fault+0x25/0x50 [ 1000.772697] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1000.778321] RSP: 0018:ffff88804a537c48 EFLAGS: 00010202 [ 1000.783714] RAX: ffffed10094a6f00 RBX: 0000000000000004 RCX: 0000000000000004 [ 1000.790994] RDX: 0000000000000004 RSI: ffff88804a537cf8 RDI: 0000000020caaffb [ 1000.798271] RBP: ffff88804a537cf8 R08: 0000000000000001 R09: ffffed10094a6fa0 [ 1000.805551] R10: ffffed10094a6f9f R11: ffff88804a537cfb R12: 0000000020caaffb [ 1000.812841] R13: 00007ffffffff000 R14: 0000000020caafff R15: 0000000000000004 [ 1000.820150] _copy_to_user+0xaa/0xd0 [ 1000.823880] sock_getsockopt+0x3ff/0x1730 [ 1000.828046] ? sk_get_meminfo+0x440/0x440 [ 1000.832210] ? find_held_lock+0x2d/0x110 [ 1000.836286] ? __fget+0x201/0x360 [ 1000.839752] ? sock_has_perm+0x1c0/0x230 [ 1000.843831] ? selinux_tun_dev_create+0xc0/0xc0 [ 1000.848538] ? security_socket_getsockopt+0x83/0xb0 [ 1000.853570] SyS_getsockopt+0x18e/0x1c0 [ 1000.857561] ? SyS_setsockopt+0x1e0/0x1e0 [ 1000.861734] ? SyS_clock_settime+0x1a0/0x1a0 [ 1000.866156] ? do_syscall_64+0x4c/0x640 [ 1000.870138] ? SyS_setsockopt+0x1e0/0x1e0 [ 1000.874296] do_syscall_64+0x1d5/0x640 [ 1000.878201] entry_SYSCALL_64_after_hwframe+0x42/0xb7 09:24:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000100)={0xfffffeff, 0x0, 0x24, "6ea2b326efa8c61666fcae0362a3352f941720f47b30c7797ec31c9312212a93ce5c0fac3f58c70eb204b287bb249efe0d14ed242e0178be4669716f", 0x33, "513c57f02104b874a71217240fffab22bbb086e6b77fc20f9a78a432a62024bcd5c05ff2e40f376816dc94b3384104354a58cab3450723945615e8c7", 0x8}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/76, 0x4c}], 0x2, 0x55) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'macsec0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="95450003000000000000002568c66a3cc50e23fcf7f2a3ca81dd4aa624922fcf63afe7824453cd9ed78ee226d6f7abf7573fe120953d0a21d5ae22733c091f03e23555dce08e9c9aa289492e0c33521704003400000000000000ba6f615a10b0ab98e6d08053088e99d2a8e83a30b4d8918ec38b5d4def12eeb17774d79d3551a9eeebf8f32c6c9df95913b09b9341fd887a7e156aa93f90888f04b2a443f3bfaaa5e2d0774cb9"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1000.883398] RIP: 0033:0x45c889 [ 1000.886586] RSP: 002b:00007f422171dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1000.894302] RAX: ffffffffffffffda RBX: 00007f422171e6d4 RCX: 000000000045c889 [ 1000.901579] RDX: 000000000000002c RSI: 0000000000000001 RDI: 0000000000000004 [ 1000.908868] RBP: 000000000076bf00 R08: 0000000020000100 R09: 0000000000000000 [ 1000.916148] R10: 0000000020caaffb R11: 0000000000000246 R12: 0000000000000005 [ 1000.923428] R13: 00000000000001ea R14: 00000000004c41b6 R15: 0000000000000001 09:24:36 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1000.963383] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1001.065503] audit: type=1804 audit(1587201876.485:216): pid=5952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1393/cgroup.controllers" dev="sda1" ino=16001 res=1 [ 1001.093062] FAULT_INJECTION: forcing a failure. [ 1001.093062] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.118105] CPU: 1 PID: 5950 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 1001.125957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.135318] Call Trace: [ 1001.137919] dump_stack+0x13e/0x194 [ 1001.141565] should_fail.cold+0x10a/0x14b [ 1001.145862] should_failslab+0xd6/0x130 [ 1001.149853] kmem_cache_alloc+0x2b5/0x770 [ 1001.154036] ? get_mem_cgroup_from_mm+0x157/0x460 [ 1001.158897] ptlock_alloc+0x1d/0x70 [ 1001.162537] pte_alloc_one+0x57/0x100 [ 1001.166356] do_huge_pmd_anonymous_page+0x561/0x11e0 [ 1001.171477] ? prep_transhuge_page+0xa0/0xa0 [ 1001.175894] ? pud_val+0x6c/0xd0 [ 1001.179269] ? pmd_val+0xd0/0xd0 [ 1001.182646] __handle_mm_fault+0x23ac/0x3280 [ 1001.187069] ? copy_page_range+0x1d70/0x1d70 [ 1001.191493] ? find_held_lock+0x2d/0x110 [ 1001.195583] handle_mm_fault+0x288/0x7a0 [ 1001.199656] __do_page_fault+0x4bc/0xb40 [ 1001.203816] ? vmalloc_fault+0xdf0/0xdf0 [ 1001.207886] ? do_page_fault+0x60/0x4f2 [ 1001.211876] page_fault+0x25/0x50 [ 1001.215337] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 1001.220963] RSP: 0018:ffff88803d707c48 EFLAGS: 00010202 [ 1001.226335] RAX: ffffed1007ae0f00 RBX: 0000000000000004 RCX: 0000000000000004 [ 1001.233622] RDX: 0000000000000004 RSI: ffff88803d707cf8 RDI: 0000000020caaffb [ 1001.240902] RBP: ffff88803d707cf8 R08: 0000000000000001 R09: ffffed1007ae0fa0 [ 1001.248182] R10: ffffed1007ae0f9f R11: ffff88803d707cfb R12: 0000000020caaffb [ 1001.255464] R13: 00007ffffffff000 R14: 0000000020caafff R15: 0000000000000004 [ 1001.262791] _copy_to_user+0xaa/0xd0 [ 1001.266525] sock_getsockopt+0x3ff/0x1730 [ 1001.271063] ? sk_get_meminfo+0x440/0x440 [ 1001.275226] ? find_held_lock+0x2d/0x110 [ 1001.279300] ? __fget+0x201/0x360 [ 1001.282773] ? sock_has_perm+0x1c0/0x230 [ 1001.286846] ? selinux_tun_dev_create+0xc0/0xc0 [ 1001.291546] ? security_socket_getsockopt+0x83/0xb0 [ 1001.296576] SyS_getsockopt+0x18e/0x1c0 [ 1001.300559] ? SyS_setsockopt+0x1e0/0x1e0 [ 1001.304717] ? SyS_clock_settime+0x1a0/0x1a0 [ 1001.309142] ? do_syscall_64+0x4c/0x640 [ 1001.313124] ? SyS_setsockopt+0x1e0/0x1e0 [ 1001.317280] do_syscall_64+0x1d5/0x640 [ 1001.321184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.326383] RIP: 0033:0x45c889 [ 1001.329574] RSP: 002b:00007f422171dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1001.337294] RAX: ffffffffffffffda RBX: 00007f422171e6d4 RCX: 000000000045c889 [ 1001.344572] RDX: 000000000000002c RSI: 0000000000000001 RDI: 0000000000000004 [ 1001.351853] RBP: 000000000076bf00 R08: 0000000020000100 R09: 0000000000000000 [ 1001.359134] R10: 0000000020caaffb R11: 0000000000000246 R12: 0000000000000005 09:24:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000340)={0x0, 0x69a5, 0x4, 0x2c1c}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1001.366414] R13: 00000000000001ea R14: 00000000004c41b6 R15: 0000000000000002 09:24:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000dc5d0602b3204494bae075116e64", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x900, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x1f4b, 0x802000, 0x4, 0x20, 0xa377, 0x5}}, 0x50) sendmsg$AUDIT_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x820) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) [ 1001.420153] audit: type=1804 audit(1587201876.485:217): pid=5952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1393/cgroup.controllers" dev="sda1" ino=16001 res=1 [ 1001.493821] audit: type=1804 audit(1587201876.485:218): pid=5952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1393/cgroup.controllers" dev="sda1" ino=16001 res=1 [ 1001.601803] audit: type=1804 audit(1587201876.485:219): pid=5952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1393/cgroup.controllers" dev="sda1" ino=16001 res=1 09:24:37 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1001.757628] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1001.768136] audit: type=1804 audit(1587201877.035:220): pid=5962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1394/cgroup.controllers" dev="sda1" ino=15795 res=1 09:24:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, 0x0, &(0x7f0000000040)) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:37 executing program 1: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="002000000000000000100033928ec25d789b5a5fe43648d3e7be1b1624aa46ab3e787ac4de69b42c13b8297556f62bf978137ece65fee257528d4a26c2f2f562f5ed2becf063ad60427728579aea5717bfaf"]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0x5) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1001.879586] audit: type=1804 audit(1587201877.045:221): pid=5962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1394/cgroup.controllers" dev="sda1" ino=15795 res=1 09:24:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000000)={0x1, "5d0a5ae9b8f09c06899a7df1a78a9707afb0172d530ed42c5a4d66f102141e53", 0x2, 0x6, 0xe71, 0xff0000, 0x8}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@dev, @broadcast}, &(0x7f0000000140)=0xc) [ 1001.971082] audit: type=1804 audit(1587201877.045:222): pid=5962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1394/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 1002.063745] audit: type=1804 audit(1587201877.406:223): pid=5975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1395/cgroup.controllers" dev="sda1" ino=15771 res=1 [ 1002.157501] audit: type=1804 audit(1587201877.406:224): pid=5975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1395/cgroup.controllers" dev="sda1" ino=15771 res=1 09:24:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x32}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r5, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1d3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600080}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb8, r8, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa08}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x872c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff80000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8963}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0xc045) [ 1002.272882] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+10000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000001240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="a648ff6574fac439c7aee911fe413969ad0aefce2f56ea3d8e26a8173be914f4c0e47495be24bc493aea3a82586f7cd8d8c0796e28596a89902cc3c93279d05ee9857a3a82ba0005b72dc3ec802cca1145bf433fb0206ce80933039f0dffa802deb8967af064cb27429553b3944cef5dd558fc10f24d1445fd9fcf9cb7387fc301473436d4465ac7a88d22dc39dd1a5ea199d9a8075dd173eda3fe3a61f1e93879b03e28b23b787bedb2dfdc481d8210bf0a5a31e50a07285c5381e80d86bdae0c232023af7e0bcab19d0c3fd7bba1729519cbdc838b0aadfdf16438f03c4d170e2013a2954d7e472c5f5c4f1f5ef78e1123033cdbc86cff116a242b1bf2ffa7529c6ba0b52f3e35840a5d40bbf030871729d2d9de2e8949ed3315a2f9dd7ccace964d01651ae2ce6c82943d89fb057d8226dafb04923bca93b103ef5972c7aa94baf440408e0847053b5fecfe859416b62a1c228bc36bf8d2c90c045a0bf0ded1cfd3f265626636ef24f0987339da39ff5355ee9d13b43ef9b48cc60349046880a1bb1ecbdd45271da51df99711cfcacdc85b801b6b5bb467108de5049d07f38e13c94f50ea33498a6ef1fa02cecda2c4346f8d383fd3948743cca66f343288a9277cbe8ffeab72cbc46bc6e0a0774a9f80c5e8e5fac3a22840c844ce6d3d97f900c694d079bb84dc6a07fad5554037cf7051e6dd284eaa997656270690aa1d2dab0c85f17451911585e32bb20f917d416f7ec6af7e29e6d2b39ffc16aa9df56cf73d302aa321ba57f92d99c8e867632d57209b6651d7a7e3d4a13c5ccf8d70792ebf4ba3da265ec0b928daa40a091effa8e2f183d951a57cd77d8e1419213b5eb68f911c50fd33a7bcdb0b4594759ee9c19e02484f9ff45c973c2c82882d9b1d73e913135a5cee293437e5357f22dc29f90fe3773666d654e16e4f736770b8504703de3b1b7113e22bfd0e11cfae4db3d253796fbdd23c7c8e0efff9abd0ab5b5aae5ff10366162adaf661f25e9208e0a6386f0ba343a9119b6022ff5f637891d4b69a2e40c16c2f4b1c0221e8cbde31d3a9cef2a2eca927daa468ecbf8ebae70e98042255a33c5c79539f4588a06a2788ddf290f89cade5976ef1b16fbd9ea162932d45bb48da84def377b8b71c330f37d4c1bc34511fabbc311dd61500758340f9b5e9e49903074023c09a535d9e937c6b9a1410d937c8e5e543cda3b25bba6a489721c20ed6b0da17397f45a13865318f6ebfa699ea66bd5fd4e9c15e433537c2031d2a1e0c77f1d5c5278705b0c1f86feda54e24f0a02c249057fd2ab7961e394f727f7d6b12b4cd6dd5087e26e36d6a8fa1a71444dcee2f571a02ae801d86c4b8dcd6f4c2616d268139d4e4d0ffb0484c72a64260cab6a0faabf6c713a99ce0be4c51cb614e2e95f733ce2a3141ed54d2068af4297cbd3021a029dc5af2fa23fab925ec771719d5a737ba6152ee579bd143f5ea2a7f2920c3d377104a92a4466cf03b6b6872505d4e9128ba5c1e664a7828095d711b4c23c1e4f54f1634d5cca53b77b82d89b2b60772164dcfe5d527d6de388f337a5e67295145708a4aa0025c0e65a1efbdac1197525f21f4cb3931f7164ba9e18a50d72de31c3a0d30a362ba12e060f1e3935628bd50248b9b55d32955f4d202e0182d3194b4f77fde804313c8ccade5aac907c89b601b295f7910bd29c325fa439043e286f643dddc73fe87df9fdabb00b8fa75eb8fa19741bb890c087bca515a9d99a80966700243e8c35ca6cf956c94029bd679cdd3f10cb87f3b3ab3282043bc7d095fa3877b7945cb90ee779dd75579cb42f14f768f2c467493b88b6269052518ce530766bcad9db68dd5aa0b1404768a1222667ff1f0cb13521034e47c04d2725daef5a14b30d50179b8e9758dbc374f45aaafd481eadda4be472820e0082e1ba3c601d134dd7ed9492c8174ebaccdfdacb2f2af981328939255ab1387862b9ec20710fdc2565e6777b35e262dc07dc78fe5004f494504651eee63000cad15b12d3dbdc5a8cc940bbc0deef8d94204d9c885f2538bfb491a5723a20476cb8f0cd46c4dbcd694a711317f389ad5d55ac9c227272fa80f6ce1be2d798941785f8ce3374ad3d6cf04bfa637268841422f63c1300f1731fab3d669abcbc03698b992f3d3a4856a104608f1bbb81f3bd4102a5211deca6ae8e3d46d3702bb7ac684d1e644a0cf9316f0fe5069ac4ec3d62ca751a338d7656df6e92933180ad6cba5703509e979288db4cf5fa4dc9633ab9ac9a62bd827e23985a70704ad13f14aed59ef6e8609c77c0dd75de4339f38f9ddd6535d2854bf8b784f1c3e17acf314cc91d123c23c423d599483cec01485d7e47a2febc16d1b29a1d78f8010d0417ae33eab853417841f11aaa096a79189bf641d23448a8dab7df36be9f49c217238aa2e2a0df67d9e2bfea629bdc592c223dc265f348d42880fc59f277c29192526ac88addf61355f4c7127f39f8d6a6dd5cf8749335bd66e2ba22e149b0929695a6f61f776278ef6b23dc69e3658b16a009f812e54efcee4e3200432b5e0b362cb18f2b14955bba7dde76bb40c11bebc32c0fabc75e537114e9ffc07cc34fda86070d5b0b8133a1b4e305290f9c9849fd8677ce903dddb86e10def0a13ccfcd9f029a3294ab254a0280415967fa284686b16304a3ee415350df0a08fe9469da55d12ac295ac3e5015d420524c74a2cb1699fdfb337a3b42c0d50aba4b8b33d18574a4128248c0d9df12a1b9079f69d8d79c929e85b59b50161c3d0f2c9b78899b8db07e32515bf6a29573d986b6888ce403656e01cbd8e90c6be90fcd4d04c19edc19e2d6f314f98e6773c5286a256d9a2ed3b6dae2fab7a64b19015569f9a178386fcc507f904a203375e3c0293e36b6d3337e6eac9b38a3fcd95ea413acf7cf90c74ee7b11c5628cf551846a50b689bd94da1ad878feca13bfa5982d9653371cbfa4310748bc07160e46342d55763fd7c33105c0cf4434ce249afd5cb9001d586b5a4f8e8847ebcdeafeabc33207d1ea1a7cb407141c3d84fd724d983b1d4aed3cfc74eb0e782c260c41093b370a73d104634f62322952f8466c393dd221f757d9d5e89db1cc41e1ddb04f804ee6e8b321f06d014c6f462399321f3e8de7e87ad2b9976f6420310f3820b42668ef81778e2e640c79d54be379747bb0175c9d9ad1077aa359ffcbea5b425ebce95623fd68f08aefdc4d783abe07bd6356e3d0bde098c1a2c5b3cb8b0f5126bde829597ba1aa415094a481966e2052d924051b159b5d45dc6768de88e6f652afd3fdf258206ca87cbd99d5282c1ccead8375dc354542ba7b0ed84a3c3bb2442698042806a409d88dddb7e8a94422e13d56bed0af39bba72d4fc5f77295c3d0560d2400bcda99af3f5c6c2b0bd11cb48b7795d2e9dccbc509c3bbfa24efb17e5f57f74f0be7f9715a231fc7cb23130d3d39df6be3a7b51c629c4d77834ad76603c172fa5ed3c3d8c67837ad4ed1e7c41c7d28d612564b3a1f55ec974b392fb2c2c3f652feaa1df77c849a2e22afc80afbc30e4c9323b88928f17b328ee99d3bc6dcc9c53c7a843f1d57850d1c95fffb11fa02ae6e3f911516fc7a3ea3554e80b301e35d9ae6c9f31a58c7148e5c011add4581e1348384cf5610ffced9d3078cbb61f246516c7c7a026bf72e9d19e2cb23fcecebb3f64edcdacc56804d657fa371035d17c971b2f0e927883dfbcd5009e4c0af88af036911d19180ba1f0780257520c22b03e71fa571e0da05c4077f040a26891e0d31c915c004bff9205d55870441005267c4f6a43e088ecfb9ca88df15b28e130faf1800ba162a35d512574162b379b72f15ac75eca7d11c9c1d48332003deca66b92352600d6304984d7cabf6244e12f18e0b524f3c937194bd86c8eddf0de48ffa1f0805f4b1c13a63b903410636e050f7721abb51437379fb23da0de8d3209f126321f0e99967eacde5804af8e3b5cf5fad926186429ed8d6758c0e9be95e2f537d38583b89d64daf112783cdc7f86f63e791492b5be3474d4fb7a417ff8d1759e61fd40237e189e0789fb47920ea53a4813eb92745903e5423e2f955d41af8623254b59cf2144c4df30ef10d1a2b295944baa676131729405a594a7a3cd7c7612cfc0dd9bf63ecbb592fd70819e13f79da45d35adae8263d2c030a7a1e3597a97e72b21652ca0a6b0fae7719db95b81988a5dd71ffd37af8f49498218428f0eabdd9c5b29e43b15fed9f4144049ba5006862afcd386fd6b50107228bf637efbc5414150a36b861463ce51fe52f19cb886b7a2b25bc7de44e71f73d21711a870614d4b609c9c6be5061269c7fe231f363ea299a2897e838d29102fd72cef50b1a99cce84e1e8dd70788374f04eee7094d4bfabdf369ac8615b90dea92195b1c27ec1082c55ee9cde58816936ddd3b079c9904775910547789db8a9ab7278e2ae4ba983a3365e8e68dd4d6e4ddb26f00c2564dac7db181704d68d15473ee4faeae299bcaa544eceb31cc16bb3cc18e4443dc2f6805085c7ccf867d2bc4f3cdd88d55b4122ada274ea5e09d066792e7a74a9a679a3a544e975b75f36f27a18a98222a5a375e2c1edafa1d69b55a4d870f10902eba9fb7624b3164f8c5ca6211aedefbef381ecf76cd6f1628676ec759cd2b3c064922de5efbe661921da4d9ef82e9255197adf83ec9e4882690555b918f3b8fd4abb6d8a030347b007c882565e40784812a7a4a48ea16b64b36fd2d3035b47d88264c85bf83166de8087cc0b34a5dd075175de87de2295551ef6eb4a4104019fb1321726a538e41a762c639d7e4f0c096fe678e7d4e6bbd8aee10c1fb215d0a26827d6cf7edd7771c1e7cd23dbf5c1ae372cd3ce1c27efbaf883654ff308275eb9f1b6c5eb2963f73c726898c393be8712dbacad8e82b63b0329fe7923df56f3bf64bae467159cc0fdb57bb187c7188daf2db828b4ada9f50048c4fa09b8b6967008a52cbe4dddcd0d04a75565f355467e4f23214e93c0d9e087902a41da4603b00dfaca18aa7b4e9824157ed96f92f478067587608795813a96f6fe45a91989d6b7342b158518a66988f28d58983d027f52fdec88bed0e41b21acbd7c5d1a6c5c62e16f049537965186f6d03e637bba0141d83747cd82b83f33e3421f98642ef5b4677b4064ea38176abeb98f28138561c853cfa706763f8b02b8df72746175c15e19882e1389457b286f9f9cdb35f08995172771287a3606a3c09a945479469e760b5462f0d79b8a2f2e3da14ea8f5f7eb87788859fa6c139250f5671c1517cdf0bf6d274812fda0a42f45e1c197f09f21edad82a2cf106434140a1a651486cb8a44a824da0274ccdb50dbfee035dbddaefd901790e79a776153660872c4b10a4a5807658c56c75a311d57f73a4228cfff3ac842fe05cc6145d69a592779635af124f00c0a2e1f34efdbd073fd08507c40dfedbd382acc1c4c4ae03d0a7ed868242b7eed91c1cc8e06a7d160829ca6c90293fe35f5f7ce0d4dfc93b2f223d05c2f27b7e5add6a4827cc2db60a1fd8da9d548540998e7434d7d13d7bd48256e40cf4256c2eec68df80d69171ffacc842d7602a83999783cb55dfb72fad4b3b85541e11f68e8070acdc2af0540615bdabc7d0de976f845e68275697f31b2ee5a381f023ca16c746098772fcf447325750e36d89443d320b1eebcb3d16bc273f01865e16c7afa2481082157ffffec034ba3af5860d01484fb08221b43e4263effdd9464d8c97b88140cd00a26f9b709d79ca6e7d68a2bb769e158aa313", @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 09:24:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x44) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1002.458000] audit: type=1804 audit(1587201877.876:225): pid=5993 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1396/cgroup.controllers" dev="sda1" ino=15771 res=1 09:24:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000007c0)='./bus/file0\x00', 0xcb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f00100000000000002f6275732c371150008a5e05166e3e42b2e86f726b6469723dae2f6e2c75707065"]) stat(&(0x7f0000000640)='./bus/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$afs(&(0x7f0000000340)='afs\x00', &(0x7f0000000380)='./bus\x00', 0x0, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000440)="42ffccdd6a89cd42019af9880263323000bc9afd4ff8cf3e031b52134cff920d3f06bb3243e9e30dff27f61084ae1a5e407f18473dc9b452144962370b39847373fabf2a37b1ef8d635a408cfa8417c1afd13bbae922f75821", 0x59, 0x8}, {&(0x7f00000003c0)="00908cf92d126a98", 0x8, 0x3}, {&(0x7f00000004c0)="9ef747352c2be7b2fea8818135a9bc4b", 0x10, 0x4}, {&(0x7f0000000500)="0f3d80851ee6d972fdbaacfb84d299b84b72112eb528cd5571e1d55ac42341f9b5d9802d272eee4c583b3fd35a088f48508f383f5f439e32a310c3a9d656ab96aada2382efad96bfa0365e863bae42f2c07e3a05be40db5ebeaaef595263ab10b7ee78f147bd65971a0055d5250df685f31fd58bcd997ef216ddb336fe2d3668b19df9e376e3e734f3", 0x89, 0x8}], 0x320808, &(0x7f0000000700)=ANY=[@ANYBLOB="66c06f636b3d770500749242666c6f636b3d6c6f63616c2c666c6f4a6b3d77726974652c666c6f636b3d737472696383e2276e407ad6af77726974652c6175746f63656c6c2c666c6f636b3d77726974652c7569643de4", @ANYRESDEC=r0, @ANYBLOB="2c73663d5b00007375626a5f726f6c653d6f7665726c6179002c736d61636b0000000000000000000000000000000000008100000000000000aaa89c5a3ce931e4b7f5653a43337041da72a03247851afa"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1002.742929] overlayfs: unrecognized mount option "lo" or missing value [ 1002.830536] overlayfs: unrecognized mount option "lo" or missing value 09:24:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f663e32dcb15fa1fcbc696c65312c7570706572646972"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1003.108997] overlayfs: unrecognized mount option "upperdir" or missing value [ 1003.148795] overlayfs: unrecognized mount option "upperdir" or missing value 09:24:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x6e0c80, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) tee(r0, r3, 0x1f, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r8], &(0x7f0000000140)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000200)=0x10) sendfile(r2, r1, 0x0, 0x100000002) [ 1003.449391] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4], &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @empty}}, 0x401, 0xe94, 0x1ff, 0x8000, 0x82, 0x5, 0x6}, &(0x7f00000000c0)=0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket(0x9, 0x2, 0xfffffffd) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,nc=MODULE_CHECK,fowner=\x00\x00', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="8937d45e0cb9401029287a23a4a39985009a818544b09510a08a33271d7a11a4318b9f9fc4164ee2", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000440)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "5b573560fe34fe183ac5633a87737737c427d204"}, 0x15, 0x4) 09:24:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) [ 1003.859712] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000000c0)='fd/4\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000040)=0xc) 09:24:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275ec39776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0xc}, 0x7}}}, 0x88) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1004.134363] overlayfs: missing 'workdir' 09:24:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/16) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x6) [ 1004.163615] overlayfs: missing 'workdir' 09:24:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x100, 0x70bd28, 0x25dedbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x3c}}, 0x40010) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r6, 0x0, 0x2, 0x4}}, 0x20) setuid(r4) ioprio_get$uid(0x0, r4) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r7, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) connect$netrom(r0, &(0x7f0000000340)={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:udev_var_run_t:s0\x00', 0x24) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{}]}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x111600, 0x0) r7 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1004.439292] overlayfs: unrecognized mount option "$g#8VD!˯Zb\!\:ΡJ.g>$" or missing value [ 1004.510327] overlayfs: unrecognized mount option "$g#8VD!˯Zb\!\:ΡJ.g>$" or missing value 09:24:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000040)={0x8, 0x7fff, [0x3f, 0x3, 0x2, 0x1, 0x1], 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000000)={0xb55f4eb41b7dae5d}) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706d72743d3078a597db2f27303030303030303030303030340b149dd600ad090bc34d4f44554c4576434845434b2c666f776e6572e70278760d50136ad621a43cac0f229f3dd8f89eefbf8de3aedf9119a6106a918bf529a8784ebc9421ba128ced124017b3f669", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726448723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723da52e2f66696c7e30"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) read$usbfs(r3, &(0x7f0000000040)=""/119, 0x77) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000000240)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @enter_looper, @acquire={0x40046305, 0x2}], 0xb8, 0x0, &(0x7f00000002c0)="b199d77dc71a04ba6da1013d0637fea10db9a07d46464cb90663187e409f285b7c6535c8ee7294010602a67aea7a33ef14449e6874aac08c07ba26564b866d9df7ec47d25b7c446cfa3f2a89128e2a8ddaaa985ec2a2f93b7d005b315f2ad366e3fed07c29e4a7f8e037c61b006e426a7bbf677c1dd4c76e6607a248a8e8f9af8f6d7b8863f5bda2b4b62fcfb3fd7c25772ef28be3225c9d9a8546ef29294906464e2ddf661e6ca9387e5394ccd4180bb0bb14af208d72bd"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'macvlan1\x00', {0x3}}) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000000140), &(0x7f0000000100)=0xc) [ 1004.794626] overlayfs: unrecognized mount option "lowerdHr=./bus" or missing value [ 1004.848735] overlayfs: unrecognized mount option "lowerdHr=./bus" or missing value 09:24:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0x4000, 0x5000, 0x5000, 0x3000], 0xe37c, 0x2, 0x416}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x2, 0x1, 0x8) 09:24:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x400, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x80000001, 0x4) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1005.182550] overlayfs: unrecognized mount option "017777777777777777777770xffffffffffffffff" or missing value [ 1005.251766] overlayfs: unrecognized mount option "017777777777777777777770xffffffffffffffff" or missing value 09:24:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000002b0006000000000000003c00ac2529b6ab9e40b7a1241dc5dcc2fd6a5d999e873ab755070639dcaff74cc08f001329d64a08bbf34f0d55c47de9f7a52ef1ca21231ba1a3e266b40f5e36742d523577f5d2e80e58185cb14299aa5fed2e58c8bae476760695d78c", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23986ad1492881ad93efde8b98d7459e3e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="e0b4dd0d5b63734e0a336ebbdf85f74826d1af28e4b497c49643", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setuid(0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x2000, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x1}}], [{@permit_directio='permit_directio'}, {@uid_lt={'uid<'}}, {@euid_gt={'euid>'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@measure='measure'}, {@euid_gt={'euid>'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@permit_directio='permit_directio'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/user[posix_acl_access'}}]}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) readv(r2, &(0x7f0000002600)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001240)=""/222, 0xde}, {&(0x7f0000001340)=""/220, 0xdc}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/179, 0xb3}, {&(0x7f0000002540)=""/7, 0x7}, {&(0x7f0000002580)=""/87, 0x57}], 0xa) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'veth0_to_bridge\x00', {0x4}, 0x5}) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x3fe, 0x3}, 0xe) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1005.911103] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="803327494863d5b6fc97", @ANYRES16=r3]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000003c0)={0x1, 0x3}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x5, 0x2, 0x4, 0x0, 0xe4b, {0x77359400}, {0x1, 0xc, 0x80, 0x1, 0x7f, 0x0, "151f34e3"}, 0x8001, 0x1, @userptr=0x4, 0x4, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xffffffff) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000300)={0x7, 0x1800000000000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x5, 0x3b30}) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_macvtap\x00', {0x2, 0x4e24, @private=0xa010102}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:24:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1006.186087] overlayfs: unrecognized mount option "" or missing value [ 1006.227147] overlayfs: unrecognized mount option "" or missing value 09:24:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) mount$9p_tcp(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYBLOB="fc10c2276e0bcfbdbbcd6056c99e93e448dd6381cf10b09d5a5767f32e7ac75a534fc5d0abb69a5f16e9dad3d0248a6268811a9e5829196748b6d51e3dcde03618c8c5dcb090f0b54c4e041d5303fe3e0d7fe308cee6708b58bf6ce6287d8fb5d8a0d198b43d2e389068b6f617fee25fe2c7cc0dfb979184f1d3eb3d203cb70b7e68a24c4c6a1dcd81ff34009b0faa4fbf995350ba6a2a34fed02bfd7f356258c3800ece54327fd45e8e89ab510a12a5641c673aa5f29d18aab6a9b4e01fea543c2ee8a163c074b648a9468b529e6f9c5c46fa803e68486756cfad3b973a"]], @ANYRESDEC=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC, @ANYRES16]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469454f015c6a723d2e2f"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x20, 0x40201) r3 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) splice(r2, &(0x7f0000000140)=0x3b257d6d, r3, &(0x7f00000001c0)=0x6, 0x2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1d1402, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f00000003c0)={0x0, {0x101, 0x3ff}}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r9, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x9c, r9, 0x62cb6e0660e64311, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4035c764}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x60e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x65}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe039}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x841}, 0x40000) r10 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x10001, 0x680400) ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, &(0x7f0000000240)) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1006.539048] overlayfs: unrecognized mount option "upperdiEO\jr=./" or missing value [ 1006.586618] overlayfs: unrecognized mount option "upperdiEO\jr=./" or missing value 09:24:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000003c0)={0x9, &(0x7f0000000340)=[{0x1, 0x1, 0x7, 0x8001}, {0x7, 0x0, 0x3, 0x2}, {0x6, 0x2, 0x0, 0x73}, {0x68a, 0xa0, 0x2, 0x57f}, {0x1, 0x8, 0x2, 0x9}, {0x2, 0x4, 0xc5, 0x401}, {0x1, 0x59, 0x5, 0x9}, {0x0, 0x1f, 0x20, 0x7f}, {0x0, 0x1, 0x8, 0xffff}]}) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'netdevsim0\x00', {0x2, 0x4e24, @multicast1}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1006.941018] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 09:24:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000001240)={0x1, &(0x7f0000000140)=""/213, &(0x7f0000000080)=[{0xffffffff, 0x1000, 0x1, &(0x7f0000000240)=""/4096}]}) 09:24:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x9]) semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f00000004c0)=""/201) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffe) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200100, 0x0) connect$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102, 0x3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r4, 0x89e7, &(0x7f00000000c0)) setsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000000000)="aca27089738d349962e11aa972615b4b4995ad62381c1519015f3c3626bb15a005cb67e51584df869496c568aa12", 0x2e) 09:24:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x2, 0x2) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1007.502415] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) getrusage(0x0, &(0x7f00000005c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="7472616e73a842e3cd0a4ff893c0f9017463702c706f72743d3078303030303030303e30383030346532322c66756e633d4d97a890a0fd15f94f44554c455f434845434b2c666f776e65723df5880aa38089bdadd774973baebb33ccf96156c18e4fef2b77486feb863619dd1b8cb3c928c357aeb491ec741ddadd89a93827d3c8db7f150d5b7302241d3b5fad9f", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="f59386bbf86e5a050179001ff5c39d500aa1addf14da7a541e5671ce2785737d17fa6bf50e386f6ce11780a563d8d86ceb14cff5ceed0d96dc7bfe9f1c24b1a927c672f210b996aba3a1cd28a0cd239eee593b3c087b02956d93f37975597d53bcde802817d9de48ac77327083f2ad96a7b571cc7a1a9ec64e09bab0c858c2eca9e45ab9f32acb2131d2782cebc16bd73892034f974f642457a05a5196a2b7bdb4b0264c1ac838a77cc880a0f83ec578c186fd70d87197ef69ca3170f88980e35ff1bb5f631c767369d07573797152a437a5cfd8ea9661f7509e5e9851cd0d47e00b2fddea097e70ae9b6a31a907996461050942cbe1ea00"]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f776569723d2e3066694ebad1eef00186f2c38798506c65312c757070657264697200000000000000008b7d1d50807dff62151afda728a9d7b7f8faa138baf01d6cc215dc869d132c12b3f34bce94e39362051ec017bd6526b40f8b5b522b45a2241ffe8c5a889e91f71020045ea77f1efafde8f057dc6ee4a22ad37466b5c2253c90fc0f8367b03d9de9"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x42, 0xfffffffc, 0x23284b07, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000500)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)="091a1ef364e18d7fa96d3c5656cde95da7a994167cfe5ffe2986f6a0a2f047c26f56cecd82d88737a94cf27bc0ad85c63a5b684138a5ab203cd9e89d8d2f982c1f6c47", 0x43, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000440)={r1}) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7, 0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0xe, 0x7, 0x4}, &(0x7f0000000140)=0xffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) splice(r4, &(0x7f00000002c0)=0x3, r2, &(0x7f0000000300)=0x1, 0x7, 0x2) [ 1007.800652] overlayfs: unrecognized mount option "loweir=.0fiNÇPle1" or missing value [ 1007.849634] overlayfs: unrecognized mount option "loweir=.0fiNÇPle1" or missing value 09:24:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c00a47acb30c8220700000095059046cca09c0782e5c32aea384c8be3b3d20b7d02a9567ed7f7cc485ff4a83da25d799ef358585450210697c5c0790d0f118ae1d451bf9dae2f6e8ff9062e4c2f315500004698b61856cb20384711ac9ff652d4c8b9037837989d3425dca0313a1db2698240eb0f643a9c2c3621d19249ab1143626921f3b29f00b8e88e8a072e5c73dfc9e4b654972efe00"/162]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000340)={0x33, 0x62, 0x5, 0xc, 0x1, 0x81}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1007.947939] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffff71009fa6000000000000000008000000ac1e0001bc1414bb64810102ac1e000100000000ac1414aaffffffffffffffffac1414aae00000017f0000010a010101ffffffff874eaacfaf30ff92566a64ba413a1d335eb1f73c8a170164047a87ef08b8828c1d93eed96262"], 0xfffffffffffffff3) r2 = dup2(r0, r0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff, 0x2}, 0x0) [ 1008.267102] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xfffffffffffffdfc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r5, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x220, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008048) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2200, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x59}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044044) 09:24:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000380)=""/28, &(0x7f00000003c0)=0x1c) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d7b63702c706f72743d3036d7af7b9ab7e46232b378303030303030303030303030346532322c66756e633d4d4f44554c455f434845723d", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,wozkdir=./file1,upperdir=./file0']) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x8}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1008.381600] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1008.552386] 9pnet: Could not find request transport: {cp 09:24:44 executing program 2: gettid() tkill(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000080)=0x6a) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x456}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa00000, 0x8, 0x200, r5, 0x0, &(0x7f0000000040)={0x9d0903, 0xffffffff, [], @value=0x7}}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180)=0x1f, 0x4) [ 1008.606684] overlayfs: unrecognized mount option "wozkdir=./file1" or missing value 09:24:44 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x72080, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6c77b665726469727d2e2f6275732c0400726b6469723df22f66696c1065312c75707065726469725c2e2fef826ce5b37cec0fe3088fb67dc8f4b1e1a09d403cd7ef344d27fdfdea0500f17f29b10cd15fc0821dfa9845bbde77c0f371c7b4ec208b83df0ae56cd98390b8e9c57ca35944eeb64c23e173899d4d55f9bb6629c919727987ee3afaa8e1e1e594ac7b24b344e06339de5e10a4a7ef2ce7707c630a361f1031b25acc62270d65df"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x10000003, 0xfffffff9, 0x4, 0x0, 0x3, 0x0, 0xfffffffc}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000034, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1008.654462] 9pnet: Could not find request transport: {cp [ 1008.662789] overlayfs: unrecognized mount option "wozkdir=./file1" or missing value 09:24:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0xa, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1008.785398] overlayfs: unrecognized mount option "llwerdir}./bus" or missing value [ 1008.822615] overlayfs: unrecognized mount option "llwerdir}./bus" or missing value 09:24:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x111) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346510322c66756e633d4d4f44554c455f434845434b2c666f776e65723d", @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="1186e831318de882da114e2c6575234ca7bb6ef47506db72d58c68564bcea58134ec60854dafc835cbc78cfff32c9f7feb3e444884f68c99942684f79cdcb7c2d5f30a672de9a3d9bdf4", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7735c8f51ca8d8250fd2606f0ac47474c26572646972296b3d2e2f6275732c776f726b646972"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f0000000440)='./file0\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x2c, @loopback, 0x4e20, 0x3, 'wlc\x00', 0x8, 0x2, 0x71}, 0x2c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)={0x1, 0x5, 0x4, 0x40000, 0x0, {0x0, 0x2710}, {0x7, 0x2, 0xfe, 0x6, 0x6, 0x8, "69e2040a"}, 0xfffffff7, 0x3, @offset, 0xdb5, 0x0, r0}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000004c0)={0x20, 0x5, 0x7}) 09:24:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x6, 0x10000030, 0x2, 0x1ff, 0x23, 0x1, 0x100000003, 0xffffffff}, 0x0) [ 1009.175728] overlayfs: unrecognized mount option "low5%`o [ 1009.175728] tterdir)k=./bus" or missing value [ 1009.258981] overlayfs: unrecognized mount option "low5%`o [ 1009.258981] tterdir)k=./bus" or missing value [ 1009.283646] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000005bd618bafb891c5743438ee88b000000a877d853a4f16f47ce81f9205c08e2270b21a20f2eed40abf76c0422aeb6779ede4709009813c0c802dcf05b96a83c02a98fbae99f90f7e1d494c00f05dff357f1ad9982613987e68263bbb052387e7febe8dddd0a72d7e5302d2682fbe2cc44e4d4b9dcecc7d83d13a1b36f118b8afa82f6e66b3982b3817a3c0dd4337dcb17c09a6a4cdf11ba97114c7d1b227354dcc59dae0c85dad69c41ed2c2fe9463a6d75da53b658a3fc4e9debf390930118389e228c1c6498149118bf5deda062dd954fe535103823432a984e659a79dfed519af7f7f0e8fe4beb903fa949", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x28, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x9e90, 0x6}, {0x800, 0x1, 0xfffffff8}, 0x8, 0x0, 0x2}}]}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'rose0\x00', r4}) connect$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x5, r5, 0x1, 0x9, 0x6, @multicast}, 0x14) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000200)={0x0, 0x7ff, 0x3, &(0x7f0000000000)=0x9}) 09:24:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472526e733d0b38dfda47322c66756e813d4d4f982188945f434845434b2c666f776e65723d00"/52, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x101000, 0x0) futimesat(r0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={{0x77359400}}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0xa, 0x2) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1009.627745] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000340)={'veth1_vlan\x00', 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c657569643e1bd369b448f0b36c220320b7806be2e4f11c615a5c3d36e896e6d3bd8319c778b61a23cd7dc2e09555fb35b6531dfd36d1a331f548f6b7f53531d3747b81f1628bc3a3a084", @ANYRESDEC=0x0, @ANYPTR]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./filefi\x00'/47]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x1000001a, 0xb, 0x1ff, 0x1f, 0x280, 0x1000ffffffff, 0xffffffff, 0x3}, 0x0) [ 1009.810458] overlayfs: option "workdir=./filefi" is useless in a non-upper mount, ignore [ 1009.833917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1009.876569] overlayfs: option "workdir=./filefi" is useless in a non-upper mount, ignore [ 1009.889551] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 09:24:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x2) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x24004000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket(0x22, 0xa, 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000000)) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1010.113418] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1010.160589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1010.217197] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x26) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000016c0)=0x5, 0x4) preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) membarrier(0x40, 0x0) preadv(r6, &(0x7f0000001600)=[{&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000001700)=""/68, 0x44}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000001780)=""/191, 0xbf}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4, 0x4}], 0x9, 0x1a) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000040)={r5, 0x2}) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x1, 0x1000, 0x49, &(0x7f0000000340)="c9827d2bc9275621b1f0a0c60f05bbba7151522ad9058ec1c344549f0b8b4ea4f6a0b03defa3e66c31173eaef9ce2ee66a762aeabb679cfd485557f54d2530b1752cc44867c8d84c8d", 0x9f, 0x0, &(0x7f0000000500)="5f6aa300c887b267207e6e66ae142020f66127b727beccfcb616f0328d93dd41682617123bbb9e03fe175dbf43c600428a9cc43ec277ee2781b612178acf3f04a458e5dd12095d82a0c46e0d34a4f3d8684f0cb1198a20107149db52de513b4f6167441012f2c04e53dd9877a52d9b07f43b03c3fd960075ccc7ee2deb5c7de14a49018b21a7598ebe9ba5c166773b4ef9bad8868e1fb54300000000000000"}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x1, 0xfffffffe) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/156, 0x9c}], 0x2, 0x0) write$snddsp(r3, &(0x7f0000000000)="a13dc9c7694d725f7666a94ce32e7c3ab537eb2162990a060f160ff2f5218647958bbd91a2aef0a02e396647e188df548c06b24e6bfceae314b114783dd499ecd871e6ee1a76b8f7bbbacb3ab9ae43ff6c9b24e0cbbc8adde3e9363479b7b8f06ed662cce010244c640c7b3010983901d3edb9b881b2c0ac83f15016ba2a5edc94", 0x81) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = accept4(r1, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80, 0x80000) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x464, 0x800, 0x70bd26, 0x25dfdbfd, "8702bfa8003d9b297177c622d2675dae78b35091dfd7a24beb141c38ae85651390fd433ecc104e1724655496bef9836db3f481431c524ac6cb9ad36c8f5f50800167fa8fca7c1dc864936be38fa398fa162d73bd55af260e7348c8d0aeeee2528a5ee4a951b8879e1e7edea1fa48fd14238da70ad213a5f36bee4e35c276190e84f8ab79b5c885df25707d", [""]}, 0x9c}, 0x1, 0x0, 0x0, 0x48980}, 0x40004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1010.684056] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) fcntl$setlease(r0, 0x400, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) getpgrp(r6) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) [ 1011.049870] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',tuid\'', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000100)=0xc) [ 1011.388264] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:46 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) syz_mount_image$minix(&(0x7f0000000240)='minix\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="f4c269af4006a9bb01b45ab8f6006edfa322619f58755d386d381e9c59608e7002490241dfce8d10eab8927d5dbd3620ae19e94b5acb024ed53bdec60d6c8f181959249388d04a1bd48a526a5eca2666432c1213bdc913f7bd883c1bcbbe29006341622381c4f635eb1ff580ab94e9fe6ff72b", 0x73, 0x2}], 0xa09024, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0)='wireguard\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0120007c000000000000000001000000", @ANYRES32=r3, @ANYBLOB="04000880"], 0x20}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 09:24:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffe}, 0x0, 0xffffefffffbfffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1011.553968] hfs: unable to load codepage "euc-jp " [ 1011.565594] hfs: unable to parse mount options [ 1011.612654] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xb) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0), 0x1000) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f0000000380)='./bus\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1011.800829] hfs: unable to load codepage "euc-jp " [ 1011.805994] hfs: unable to parse mount options 09:24:47 executing program 5: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x10001, 0x80000000, 0xfffffffffffffffe, 0x1, 0x1, 0x1000000000, 0x53, 0x5}, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0xfffffffffffffffa, 0x10000, 0x4, 0x80000001, 0x5}, &(0x7f0000000100)={0x100000000, 0x2, 0xbe, 0x3, 0x0, 0x4, 0x800000000, 0x1ea}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x4]}, 0x8}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "2df381ad0ba4331b", "95dec9f626a57fd6e059525415d6e200", "f31b98bd", "cb754d74e6ab65c1"}, 0x28) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r3) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 1012.024717] hfs: unable to load codepage "euc-jp " [ 1012.031116] hfs: unable to parse mount options 09:24:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="d345c72f5077de30153d2f23f0e272e222e46ddc5f3d9e9aaab347e72de462282cea42fe01fd17c3a9ad8c17c7b362e1a11267ff3c106e70183003a58cbe8ac7fbb456e450a2018a6c051fe2d14c31e5d349b620c2d98c6579f8ae3b5440306c1427b9204375d68fb99622683e3742e6273340e0d2d237eb1e66a16207c92b34c29e619b82142c0dfccd368095678f04b931352200691fa592d760f5d07d7d969e788e85", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000340)={0x5, 0x1}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1012.138715] hfs: unable to load codepage "euc-jp " [ 1012.143846] hfs: unable to parse mount options 09:24:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_hsr\x00', {'vlan1\x00'}, 0x6}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="8029536108585524757c19742aa059f1", 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], &(0x7f0000000140)=0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x2}, &(0x7f00000000c0)=0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r8], &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={r6, 0x5, 0x4, 0x100, 0x0, 0x7, 0x7, 0xffffff00, {r8, @in6={{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x3}}, 0x10000, 0xea4, 0x487, 0x2}}, &(0x7f0000000200)=0xb0) [ 1012.378309] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB="f99302ae3a7e306391ac35811440db2e85ff8711e1565a6e60c841507fb712713343e64be418d017b3b9203a000200002c2192143388265ce30c50f89b6c6f6494bfde", @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c772099e0b3aa66bb6f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) bind$isdn(r3, &(0x7f0000000000)={0x22, 0x2, 0x7f, 0xff, 0x75}, 0x6) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1012.595004] overlayfs: unrecognized mount option "w ೪forkdir=./file1" or missing value 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) bind(r3, &(0x7f0000000000)=@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, [], 0x82}, 0x3}, 0x80) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1012.648206] overlayfs: unrecognized mount option "w ೪forkdir=./file1" or missing value 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x5) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x2}, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0xa, 0x6, 0x6}, &(0x7f00000004c0)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x7fffffff}}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765720000723d2e2f62750000776f726b6469723d2e2f66696c65312c75707065726469723d2e2f669fa8f02d"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:48 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], @ANYRESOCT=r4]], &(0x7f0000000140)=0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x7, "0bf91d6482938e"}, &(0x7f00000001c0)=0xf) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8, 0xff, 0x7, 0x8}]}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000380)=r5, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x9}, &(0x7f0000000240)=0x8) 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8001, 0x101}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000009502dd70582400ffffff00"/35, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', r6}) r7 = socket(0x10, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1012.986686] overlayfs: unrecognized mount option "lower" or missing value [ 1012.994037] hfs: unable to load codepage "euc-jp " [ 1013.004624] hfs: unable to parse mount options [ 1013.054226] overlayfs: unrecognized mount option "lower" or missing value 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r3 = socket(0x10, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x2f, 0x1}) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000340)=0x1, 0x4) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078968a32303030303030303030113030346532322c66356e633d4d4f445500000000000000002c666f776e65723da124c790d3c25c700b78f27c6640cb827393dc427b91fd7db8d02ccdeff2b3516b17d237537626ffc7ae3fc57531d1b2d4b5b643ef54b08e5bb8e700000000000000000000000000000000c5438d9501e7026c0590b6586cfaf5f6982e992abb847631eff23720d43aaba44f5148df90a4f3d3b5648379382a88c58ea12c4019aa4a7a6cf7dafc", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x6, 0x7f, 0x9, 0xfffff073, 0x8}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:48 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x41) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000200)=r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) connect$netrom(r5, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000100)=0xffffffff, 0x4) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0xfffffffc) flock(r1, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x408000, 0x0) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 1013.247122] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1013.284028] hfs: unable to load codepage "euc-jp " [ 1013.289070] hfs: unable to parse mount options 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:48 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="756d61a447612bc53278edb2ae3a4dbf736b3d3030f164693a0f25fc8d30b030303030303030303031300900"]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 09:24:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x306, 0x4, 0xff, 0x81, 0x0, @remote}, 0x10) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "715be4d44cbae28c5f4a7a5cd1a3258de86be8092ea7e16b0bd7bd3c348fef712a48d6118987ac5ddc67aa1c3239ea01efa522d74dd0"}, 0x3a) [ 1013.498636] hfs: unable to parse mount options [ 1013.534383] selinux_nlmsg_perm: 149 callbacks suppressed [ 1013.534393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23409 sclass=netlink_route_socket pig=6550 comm=syz-executor.2 [ 1013.571476] hfs: unable to parse mount options [ 1013.753575] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x29, 0x1, 0x3f) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4], &(0x7f0000000140)=0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x5, 0x5, 0xa7, 0xfff, 0xb0, 0x8, 0x4}, 0x9c) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="00efff00b055d6c582fe2e359fa65c5212dcb0b0a1be4d", @ANYRESDEC, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r5, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x881) r6 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x8000) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r7, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="020000000000ffdbdf25050000003000070073797374656d6576c063656b69745f706f7765725f657865635f743a7330002700070073797374656d5f753a6f626a6563745f723a7570647077645f657865635f743a7330000014000200fc02000000000000000000000000000100000000"], 0x80}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000ba348309a26778b35ed0e4e198eefa3dbfe14d98fc7e8a0715e3ff5c55dbe83c0fb8611385ce331d1930e8ddd66e7a9fe845b78182fa62d6b5d9e58007ba92bc883d6899dca59c6504c758c3398939247a26effb0295d9fb9918de4163640a9f8c6d7181837493181d32f95b908bc37bbfb4872aabf1d0a1099006ef7ea149a84c2a4c953ff5f363ad1c0e148a594b296650d54b7a29209975a6", @ANYRES16=r8, @ANYBLOB="200028bd7000fddbdf250600000014000600000000000000000000000000000000002600070073797374656d5f753a6f626a6563745f723a6b6c6f67645f657865635f743a7330000000"], 0x50}, 0x1, 0x0, 0x0, 0xc040004}, 0x20000880) sendfile(r2, r1, 0x0, 0x100000002) [ 1014.172257] kauditd_printk_skb: 5 callbacks suppressed [ 1014.172266] audit: type=1804 audit(1587201889.587:231): pid=6571 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1400/cgroup.controllers" dev="sda1" ino=15780 res=1 09:24:49 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = accept$inet(r0, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x4, 0xb, 0x4, 0x2000000, 0x250, {0x77359400}, {0x1, 0xc, 0x4, 0x0, 0xb3, 0x7, "190e31bf"}, 0xe2, 0x4, @offset=0x1, 0xa6, 0x0, r2}) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000440)={0x47, "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"}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @loopback}, {0x306, @random="7525a08901ad"}, 0x20, {0x2, 0x4e24, @empty}, 'syzkaller0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0xb, 0x7ff, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x21b14d111c027174) 09:24:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10000040}, 0x20004800) 09:24:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000080)=""/236, 0x2}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) timerfd_create(0x3, 0xc0000) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1014.288670] audit: type=1804 audit(1587201889.627:232): pid=6571 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1400/cgroup.controllers" dev="sda1" ino=15780 res=1 [ 1014.370141] hfs: unable to load codepage "euc-jp " [ 1014.375567] hfs: unable to parse mount options [ 1014.405507] audit: type=1804 audit(1587201889.807:233): pid=6588 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1401/cgroup.controllers" dev="sda1" ino=15780 res=1 09:24:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000480), 0x0, 0x12000) fchmod(r2, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = socket(0x10, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1014.502722] hfs: unable to load codepage "euc-jp " [ 1014.507821] hfs: unable to parse mount options 09:24:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040), 0x4) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) 09:24:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x0, 0x1) readahead(r2, 0x8, 0x1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) [ 1014.735583] hfs: unable to load codepage "euc-jp " [ 1014.740871] hfs: unable to parse mount options 09:24:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) write$uinput_user_dev(r1, &(0x7f0000000140)={'syz0\x00', {0x9, 0x7, 0x3d, 0x2}, 0x2e, [0x80, 0x0, 0x3, 0x7, 0x800, 0xff, 0x0, 0x4, 0x1, 0x401, 0x8000, 0xa966, 0x0, 0x100, 0x5, 0xffffffff, 0x9, 0x4, 0x5, 0x5, 0xffffffff, 0x8000, 0x1, 0x5, 0x10000, 0x452, 0x3bfa, 0x81, 0x5, 0x7, 0x400, 0x0, 0xfffffffb, 0x7caa, 0x8, 0x0, 0x80000000, 0x0, 0xcb7d, 0xb4da, 0xfffffff9, 0xc0, 0x101, 0x2, 0x3ff, 0x9, 0x0, 0x7f, 0xf2c8, 0x5, 0x3, 0x6, 0x1, 0x8000, 0x4, 0x42be821, 0x5, 0xfffffffd, 0x9, 0x1, 0x3, 0x8, 0x4], [0x3f, 0x4, 0x7fff, 0x611, 0x10e, 0x4, 0xffff, 0x100, 0x1, 0x5, 0x7b, 0x8, 0x1eca, 0x2e, 0x7fff, 0xcce, 0x3, 0x80, 0x94f, 0x80000001, 0x7, 0x8, 0x8001, 0x80000001, 0x2e, 0xffff, 0x7, 0x2, 0xfffffff9, 0x1, 0x4f, 0xffffffff, 0x0, 0xffff7cb6, 0x9, 0x5, 0x493, 0x0, 0x1, 0x1, 0x10000, 0x8, 0x7fffffff, 0x7, 0x7fffffff, 0x7ff, 0x9, 0x20, 0xffffff81, 0x4, 0x7, 0x2, 0x6, 0xcb, 0x4365, 0x284, 0xfffffff7, 0xb9, 0x80000000, 0x2d2, 0x101, 0x4fa, 0xffff7fff, 0x20], [0x8, 0xf8, 0x8, 0x4, 0x9, 0x5b00000, 0x5ff, 0x4, 0x41, 0xffffffff, 0x0, 0x6, 0x58b4, 0x8, 0xbc, 0x6, 0x3, 0x37c32a3d, 0x1, 0x6, 0xfff, 0x7, 0x3, 0x0, 0x8, 0x0, 0x3, 0xfff, 0xa, 0x8, 0x401, 0x6, 0x9, 0x7ff, 0x401, 0x5, 0x1, 0x80, 0x6, 0x7, 0x41, 0xc5, 0x8001, 0x1, 0xfff, 0x1, 0x80000001, 0x3, 0x7fffffff, 0x40, 0x2, 0xb5, 0x6, 0x2b2, 0x8, 0x5, 0x16, 0xffffff81, 0x6, 0x10001, 0x7, 0x8, 0x4, 0x1], [0x0, 0x5, 0x1000, 0x0, 0xf97, 0x8001, 0x9, 0x2, 0x80, 0x9, 0x7, 0xffff, 0xea468150, 0x1, 0x8be, 0x2, 0x7ff, 0x5, 0x5, 0x265, 0x8, 0x1, 0x1, 0x1, 0x1, 0x7ff, 0x3, 0x8, 0x4, 0x5bc, 0x172, 0x81, 0x0, 0x4, 0xab89, 0x400, 0x5, 0xe8d4, 0x9, 0x3f, 0x3, 0xd0f, 0x9, 0xffffffff, 0x34, 0xe0, 0x1, 0x2, 0x101, 0x80000001, 0x6, 0xfffffff9, 0x351, 0x20, 0x0, 0x7, 0x0, 0x4, 0x3, 0xd, 0x1, 0x9, 0x80000000]}, 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) close(r0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/156) 09:24:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000c300)=[{{&(0x7f0000007c40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000007cc0)=""/53, 0x35}, {&(0x7f0000007d00)=""/4096, 0x1000}, {&(0x7f0000008d00)=""/14, 0xe}, {&(0x7f0000008d40)=""/44, 0x2c}], 0x4, &(0x7f0000008dc0)=""/49, 0x31}, 0xfffffffb}, {{&(0x7f0000008e00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000009000)=[{&(0x7f0000008e80)=""/50, 0x32}, {&(0x7f0000008ec0)=""/10, 0xa}, {&(0x7f0000008f00)=""/147, 0x93}, {&(0x7f0000008fc0)=""/36, 0x24}], 0x4, &(0x7f0000009040)=""/39, 0x27}, 0x7}, {{&(0x7f0000009080)=@phonet, 0x80, &(0x7f00000091c0)=[{&(0x7f0000009100)=""/160, 0xa0}], 0x1, &(0x7f0000009200)=""/254, 0xfe}, 0x100}, {{&(0x7f0000009300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f000000a600)=[{&(0x7f0000009380)=""/171, 0xab}, {&(0x7f0000009440)=""/72, 0x48}, {&(0x7f00000094c0)=""/225, 0xe1}, {&(0x7f00000095c0)=""/60, 0x3c}, {&(0x7f0000009600)=""/4096, 0x1000}], 0x5}, 0x6}, {{&(0x7f000000a680)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f000000a840)=[{&(0x7f000000a700)=""/49, 0x31}, {&(0x7f000000a740)=""/247, 0xf7}], 0x2, &(0x7f000000a880)=""/222, 0xde}, 0x1000}, {{0x0, 0x0, &(0x7f000000ae40)=[{&(0x7f000000a980)=""/72, 0x48}, {&(0x7f000000aa00)=""/52, 0x34}, {&(0x7f000000aa40)=""/110, 0x6e}, {&(0x7f000000aac0)=""/90, 0x5a}, {&(0x7f000000ab40)=""/83, 0x53}, {&(0x7f000000abc0)=""/206, 0xce}, {&(0x7f000000acc0)=""/164, 0xa4}, {&(0x7f000000ad80)=""/129, 0x81}], 0x8, &(0x7f000000aec0)=""/233, 0xe9}, 0x6}, {{&(0x7f000000afc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f000000b1c0)=[{&(0x7f000000b040)=""/172, 0xac}, {&(0x7f000000b100)=""/174, 0xae}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f000000c200)=[{&(0x7f000000b200)=""/4096, 0x1000}], 0x1, &(0x7f000000c240)=""/165, 0xa5}, 0x3}], 0x8, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f000000c840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000c800)={&(0x7f000000c500)={0x2e8, 0x12, 0x0, 0x70bd26, 0x25dfdbfd, {0x2b, 0x68, 0xcb, 0x7, {0x4e23, 0x4e23, [0x1, 0x10001, 0x80, 0x9], [0x9, 0x1ff, 0x60000000], r3, [0xae, 0x6]}, 0x101, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "1ff45e2ef89547c4b42c126cba30c3f8e9ec8634cb0dd89217b3c8195209569f0661e62fe353e7dfcb26e961dd538a5019b79a9b495cfab2c2aa34d745df091e565c743186a8148c175ccf66b9dcb17583fe648417849f15f0fbac24f33353d3320216ae17551f111baa7fa9035f019b62279f797a4d2e9f1d5109fb544aa6c7b860d6cf96a748bbdeb9bd509145b2d5093a73908cdeff61ac861f962e9ee44ae0fb0de78ba093b38361d2d2fde2ddb053e191192f3900de293cfadce40ef126cdbf4416782ec1b57b1ae8a0f23c2e264e2cce29016200b360fc9d2910d007f5b39974"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "1ce682cfe320b2466f059e663804292b2ae2bd499114c22ea60446c58d0daf6490423331932956f2aca5eaba6c72609ace16fce2027e6d57bfe3c1890e3d175805bb8f99be"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "11e4df45182cd63c123a9eda8c"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "0a9c5ea060d6bc41865e3d8b57cc1ab05a1665e4f81f06fd5ba51e1e8e61a9bf5948cbd67661117736c6b4819cc7dcd1dddb2fddc05a3fb70ef8a9f94de1f08854c464098b3076bf89caa76fdc37c226a9dc1038ef4036bfa2b3baa4"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "df275ca1ba4178fdc61f4d0ec4c72b4d48651f5ac5212768cb4831721a04ffbb29af5e2fd030"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "01dad8f0c3ee4e8102326a27a25c7485ff9fb9970b0a6052ef291926ea936c30fd91e361faee5b75289a2d2065134e518c6c92ae9a1f671733ac67a25e743fa869e29f"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "0ed7eede592cf1fcd66564e67ab11590b336a6c5aba5b48440ba780d2888354a8ff2d9dd15bba32619522c75d4fe0d75cc52773692942fb2578c9c0d6caeca20a0607abd6c84ed14df658629d19f29e2ffe7482b53e99b3a3bd60c11e5287fb8b07d97ace464f0aebb9d03c490ba13e48fd1c6924442aadb"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x20008800}, 0x20008800) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1014.962983] hfs: unable to load codepage "euc-jp " [ 1014.967985] hfs: unable to parse mount options 09:24:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioperm(0x2, 0x5, 0x7) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) [ 1015.059763] hfs: unable to load codepage "euc-jp " [ 1015.064825] hfs: unable to parse mount options 09:24:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636f6465706167653d6575632d6a700966736d616769633d3078303030303030303030303033303030302c66756e633d50415408e1434845434b2c66756e633d4d4d41505f434845434b2c646f6e745f686173682c00"]) socket$bt_bnep(0x1f, 0x3, 0x4) [ 1015.268119] hfs: unable to load codepage "euc-jp fsmagic=0x0000000000030000" [ 1015.279531] hfs: unable to parse mount options 09:24:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r3, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x624, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x44090) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0xfffffffffffffd00, &(0x7f0000009180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000019a2d0d4e7ac7253497fd1168fd466ff465f6a394b7b8c5d00da267a000000", @ANYBLOB="aa4b93e0f48eab69349ec6f8763c0666c5e4245474cc81eb9c497bf2a0833063f7e33d6b3677020a3e4d5d72d7059ea5f3d5a2ca8276dfcd31d6e1b6ec3152449ddd34fd475894897eb03b2566bd6fefaf939f48da3f1447bd46688ebe4960a82eba4f028d6e8a457feefe536d836cc72446d534e130c59ce05b7e19760a074498cb6fc85d0f7be6775445bd1b817e", @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendfile(r3, r2, 0x0, 0x100000002) [ 1015.389045] hfs: unable to load codepage "euc-jp fsmagic=0x0000000000030000" [ 1015.396305] hfs: unable to parse mount options 09:24:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) connect$caif(r3, &(0x7f0000000000)=@rfm={0x25, 0x3, "94ca67159fb4729fb18dfbdb62257073"}, 0x18) 09:24:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="636f6465706167653d5f75632d6a7009000f0b6577b200e0609a2f01820d9af255133457a9436d77f73c78176a01dc00000000000000001890f0aba4d9575bf445808199195450c7ebff0573b719984700e44711f65ec558d58757a5e9d83041c822acbcd5a8fa14d6d3c122902000784316ce9158d3786f90a42d015c6f3b7eb5a0d66dda316d3d173536dcef586efb4311c87c56104b9b736cf2bbbe7af38d2f59a62ff456d335479c08219a13673c542633833152078cbc62bd82294d46c289c3d5a12dcbe7c3e3252406380db0d487004bf9b0fdad39b79ad0496bc654b3893f97a49f1c4e7e5677d1e87b3435fd213c3b307252b7e4f9407f3ef069be9a4206f75c42e752c64f33ea8240f39058e2939d"]) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f00000000c0)='./file1\x00', 0x3, 0x6, &(0x7f0000001340)=[{&(0x7f0000000100)="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", 0x1000, 0x1}, {&(0x7f0000001100)="b948e80a4e415bac482400d305483fce2b04c361d1e2d6cc4850d02b83dfcdd1772517061799c9f7b993eac2f72ff795d2cb6e01630c38cbc41ce5a2c16393db425154ceafc68713a6b6abaff369f0edfeec210ec2ec470ad2e9131cb2cea5ebd343e2bb842726d5eb99f11d8e32d560122e644c3384642e47a9944dd07bea", 0x7f, 0x2}, {&(0x7f0000001180)="ccedf1d4f6e2bf6eb1dba674cf1fcd24233953f9cacf8f9dc764f99eaa2e14847c34d27fa62b4b0e6f75618ee3aa544b936eff8e8c65bfdbf6d097502d11ec9da17d93317bc2200e26f483c7ab67e14bd92c2c5fdad4c847fc9f77ac4ae9cd50e03c43053681e855b4bb28b60a600ea781fe665b2fb1ba255f6543fc948bd2cf0a", 0x81, 0x9}, {&(0x7f0000001400)="0b54b613aeb4ca85af21986832a0a6ded915af7deeef31b1ee11aeb5af696108a1474ebadc75e0735ca23bf994dcd8c7a74a187dc482dabfd601615748dc123135108db5331e0b5d868bd7a86e2da5276d36e7d5c5a9382915aa0d3ae815751e8ce354ec196e35297710d8ac5d596bc24797491fcbf4af46979329b9fb6e24a4c97e51a52bb0d5597291e3cc1a3eb765c4919e64b2b69dfc299e8951ed24dcb75ad425", 0xa3, 0x3}, {&(0x7f0000001300)="379fece997fb30cd879936a64a5d217f8718c0df", 0x14, 0x2}, {&(0x7f0000001580)="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", 0x1000, 0xffffffffffffffe1}], 0x804400, 0x0) chmod(&(0x7f0000001240)='./file1\x00', 0x9a) 09:24:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1015.591460] hfs: unable to load codepage "_uc-jp " [ 1015.596560] hfs: unable to parse mount options 09:24:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4c8b80, 0x8) openat(r2, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0) r3 = socket(0x26, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1015.649306] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. [ 1015.725038] hfs: unable to load codepage "_uc-jp " [ 1015.738250] hfs: unable to parse mount options 09:24:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)={0x1, 0x1, [{0x9, 0x0, 0x1}]}) 09:24:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') modify_ldt$write2(0x11, &(0x7f0000000040)={0x2, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', {}, 0x5}) r3 = socket(0x11, 0x4, 0x800) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1015.959936] hfs: unable to load codepage "euc-jp " [ 1015.971653] hfs: unable to parse mount options 09:24:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000100)=0xc) [ 1016.044773] hfs: unable to load codepage "euc-jp " [ 1016.049923] hfs: unable to parse mount options 09:24:51 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/84, 0x54, 0x1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 09:24:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x120000, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x754faaa3ecac91a7}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@smackfsroot={'smackfsroot', 0x3d, '\'keyring*cpuset})9'}}, {@smackfsdef={'smackfsdef', 0x3d, 'procselinux'}}, {@appraise_type='appraise_type=imasig'}]}}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendfile(r3, r2, 0x0, 0x100000002) 09:24:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x1f, 0x7, 0x8001, 0x4, 0x3, "954790790a9e55c5"}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x275}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1016.286771] hfs: unable to load codepage "euc-jp " [ 1016.292088] hfs: unable to parse mount options 09:24:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x4) preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, 0xfffffffffffffffe) [ 1016.372173] hfs: unable to load codepage "euc-jp " [ 1016.377240] hfs: unable to parse mount options [ 1016.420147] audit: type=1804 audit(1587201891.838:234): pid=6737 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1405/cgroup.controllers" dev="sda1" ino=15810 res=1 09:24:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1016.490489] audit: type=1804 audit(1587201891.868:235): pid=6737 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1405/cgroup.controllers" dev="sda1" ino=15810 res=1 [ 1016.561303] audit: type=1804 audit(1587201891.878:236): pid=6731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1405/cgroup.controllers" dev="sda1" ino=15810 res=1 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="39ac49245eab4ecf724f405a9f9c1da0", 0x10) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) [ 1016.661493] audit: type=1804 audit(1587201891.878:237): pid=6731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1405/cgroup.controllers" dev="sda1" ino=15810 res=1 09:24:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x18912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r6) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'hfs\x00'}}, {@measure='measure'}, {@euid_eq={'euid', 0x3d, r3}}, {@euid_gt={'euid>', r3}}, {@euid_lt={'euid<', r6}}, {@euid_lt={'euid<', r1}}]}) [ 1016.887803] audit: type=1804 audit(1587201892.298:238): pid=6758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1406/cgroup.controllers" dev="sda1" ino=15780 res=1 [ 1016.938355] hfs: unable to parse mount options 09:24:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f00000000c0)={0x16, 0x6, 0x2a, "48e866efe0cf99a1cc3738ca1e3a84236d09871400c2588b266f927c9772e812a1ce8caf3ced612214e645b171a767b01698c441a66340bf43f2af18", 0x32, "57b64445cd097beeb46fac172011dfba42a770dcf2b907d1816ad44e15dab2d923992b938df3f4d7927ecb2ad7b3946a0048115136488894a357a909", 0xa0}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x804101fb) r2 = socket(0x2c, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 1016.990633] audit: type=1804 audit(1587201892.338:239): pid=6758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1406/cgroup.controllers" dev="sda1" ino=15780 res=1 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x5, [@union={0x4, 0x8, 0x0, 0x5, 0x1, 0x8, [{0xa, 0x1, 0x40}, {0x0, 0x3, 0xfff}, {0x0, 0x1, 0x9}, {0xe, 0x1, 0x2}, {0x7, 0x4, 0x9}, {0xf, 0x5, 0xbd}, {0xc, 0x5, 0x9}, {0x8}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x4b}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x10, 0x1}, {0xf, 0x5}]}, @union={0x5, 0x1, 0x0, 0x5, 0x1, 0x3, [{0xa, 0x2}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x4}}]}, {0x0, [0x5f, 0x0, 0x0]}}, &(0x7f0000000000)=""/111, 0x119, 0x6f}, 0x20) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0xffffffffffffffc0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1017.102814] hfs: unable to load codepage "euc-jp " [ 1017.107810] hfs: unable to parse mount options 09:24:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x4b) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000140)=@bcast) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x3f, 0x0, 0x10000}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendfile(r6, r5, 0x0, 0x100000006) [ 1017.442349] audit: type=1804 audit(1587201892.858:240): pid=6793 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1407/cgroup.controllers" dev="sda1" ino=15796 res=1 09:24:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000000c0)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r7, @ANYBLOB="b545000000000000050010"], 0x3}, 0x1, 0x0, 0x0, 0x8050}, 0x0) prctl$PR_GET_SECUREBITS(0x1b) sendfile(r3, r2, 0x0, 0x100000002) 09:24:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], &(0x7f0000000140)=0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0xb73}, &(0x7f00000000c0)=0x8) [ 1017.730490] hfs: unable to load codepage "euc-jp " [ 1017.731233] QAT: Invalid ioctl [ 1017.735580] hfs: unable to parse mount options 09:24:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:53 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'utf8'}, 0x9}]}) [ 1017.987326] hfs: unable to load codepage "utf8 " [ 1017.992967] hfs: unable to parse mount options 09:24:53 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='codepage=euc-jt\t\x00']) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000180)=""/113) [ 1018.246983] hfs: unable to load codepage "euc-jt " [ 1018.255798] hfs: unable to parse mount options [ 1018.337372] hfs: unable to load codepage "euc-jt " [ 1018.346909] hfs: unable to parse mount options 09:24:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ftruncate(r4, 0x805) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b54500000000001829aab9242100050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) rt_sigsuspend(&(0x7f0000000040)={[0x2]}, 0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 1018.638038] hfs: unable to load codepage "euc-jp " [ 1018.643523] hfs: unable to parse mount options 09:24:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') pipe(&(0x7f0000000040)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:24:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x88, 0x0, 0x2, 0x0, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:24:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0xffff, 0x2, 0x9]}, &(0x7f00000000c0)=0xa) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1019.382045] hfs: unable to load codepage "euc-jp " [ 1019.387107] hfs: unable to parse mount options [ 1019.406277] kauditd_printk_skb: 6 callbacks suppressed 09:24:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636f6460757b29a2d2f57fe526b4dc87e5fd910900488a82f47f9b520e631401015fc207e18bcc8c0ba323f0122e50b05ca280b2b73f2472ffb3fe6ea8a4bf519971b24e568018226980e1ff10361b7b52dacb4326cc8db6e6df42977aa26d5732526a7afdb31750f9673947a62723ccd5f4cc5924c05391d2e50c4fee4cc7beb1df4a3d3b374f51eed28121b8e99e48b73f6f8b14e89ac325b1136a182e2c3a0501591d83604166d29e172f2c41a92f2885310ae137a1d42bbaab9890f8869ccd5c797b24e10bfa6e0951349b"]) [ 1019.406287] audit: type=1804 audit(1587201894.818:247): pid=6879 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1412/cgroup.controllers" dev="sda1" ino=16134 res=1 [ 1019.409374] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000340)={0x81, 0x1}) creat(&(0x7f0000000080)='./file2\x00', 0xb35e80e756d509b2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="62757394a79ba9af0a7b684d38673d2e2f66696c65312c757070a0f6c51ccaef717b66696c65300aeded54df21b1ce9eac9aff42618870bbcb659969098443ff9cf0ccf56395df82bf919edd2e6c58b29022fd314a2d7a35fb580356cac754cd00000000000000"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x34, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x5bd, 0xfffffffe}, 0x0) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1019.551278] hfs: unable to parse mount options [ 1019.616416] hfs: unable to parse mount options 09:24:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) write$midi(r0, &(0x7f0000000040)="fb", 0x1) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'cp949'}, 0x9}]}) [ 1019.778831] hfs: unable to load codepage "cp949 " [ 1019.783734] hfs: unable to parse mount options [ 1019.832860] overlayfs: unrecognized mount option "bus [ 1019.832860] {hM8g=./file1" or missing value 09:24:55 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) writev(r1, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000001100), &(0x7f0000001180)=0x4) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) syz_open_dev$vcsa(&(0x7f0000001140)='/dev/vcsa#\x00', 0x8, 0x80) [ 1019.875767] overlayfs: unrecognized mount option "bus [ 1019.875767] {hM8g=./file1" or missing value 09:24:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperd/file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1020.047094] hfs: unable to load codepage "euc-jp " [ 1020.052317] hfs: unable to parse mount options 09:24:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r6, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r6, 0xc}}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="c0", 0x1}, {&(0x7f0000000200)="bccb34d0b5c9533843b47efdf6fdb1d4df0b91324a07857c7e7acb1cee8304dcc8139e809cae04fd01c3ee3d5804de89da138e70e2445d1adc5c5d350af0d04d477c7606923f580e4354ed08e804c9e79f9014f2149f30c367154c6279b0a339fa7fdc7786de1fe30ac111670f546156edf8ffaf56f24d73a7b272b60bdc2317a13d5e49ea977f6a5b3557633598ca7f796313d69282d11e7d565949fdf82a2d553414060fd684380588ddf6651b96318587fc457a5f3a7a7f9e1272d3997b", 0xbf}, {&(0x7f0000000140)="06c867e0d659231b225ad33f6bb0cb15344d409c0f43a0e92f5f4872f8e14fff3853d990835946fb5c308140fd0ebdaa241268f19b01edc8fdc71dacf3d24dcda52e6ce3d9b5f25240e2eeea550197deff525b5abfc241649e290680cd245d7b019e3b645712d84465c359803a16384dd1380174e24bca83afe8344451b59621", 0x80}, {&(0x7f00000002c0)="59c24e704f7bbc0bedd1aa", 0xb}, {&(0x7f0000000300)="5617362be3574ab6a7a78b18417c697bab2d72b53cb8e11bf7001e", 0x1b}, {&(0x7f0000000340)="0b2cd0c59efc7b92fb8e17aa78febe983c70f306eec033fd5f035684cba26ad1e59f6dd5f77756705fedfeaf0413e438a15da584bed59fc84bb4a894426775c1a46d359d932734da6c", 0x49}, {&(0x7f00000003c0)="d939f646c920998d72d970ac6d807611ff448a23d37053dfbcaa377af3534a1b8385cae85b1043304d0af820c8c6f7dec7514055bff03dff6efed76658837ecedfb98b73bfbac038b627f74da0db3b65", 0x50}, {&(0x7f0000000440)="3aacfd00f8e615ec2507112c5c7a0247dea824ed1cc761cbe4e82c078754cb045460d087fba22a4ae3c7def1d4fa778da6990667862da1850a780b979ce81d7f", 0x40}, {&(0x7f0000000480)="82428d98a385b2503c01ffac8d76a7dbd1206b6e6e97d648ada55860f74d0e9cc5b2b2ef34b784fe097a05fbe7a7e78cc97ec99cfd3e8038e61b8901d9d227ad533863099c905a940d465419eae647eb31ad2d06baaa5e67d50278ecb3744d937145b4823db515ad2d59387c62f49d1cf413bd7631f6ebd30a6bb23027ef4679778bdbe581231e248c523516e5c8811d5bea5f27056dd25789e2e602fe2dfc32a3c5016b884e7912c4f009f4a7746ac6001384a70460444ee99965113f12700535207230a695", 0xc6}], 0x9, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x51) sendfile(r2, r1, 0x0, 0x100000002) [ 1020.213222] overlayfs: unrecognized mount option "upperd/file0" or missing value [ 1020.267247] overlayfs: unrecognized mount option "upperd/file0" or missing value [ 1020.292363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:24:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5de82415f000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:24:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x183) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469733d2e2f6275732c776f726b6469723d2e2f66696c65132c7505000000000000002e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0xffff, 0x81, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_init1(0x180800) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x29, 0x0, 0x1000007, 0x0, 0x2}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x3df, 0x1ff, 0x6c, 0x6, 0x80100000001, 0xffffffff, 0xffffffff}, 0x0) [ 1020.561625] overlayfs: unrecognized mount option "lowerdis=./bus" or missing value [ 1020.612447] overlayfs: unrecognized mount option "lowerdis=./bus" or missing value 09:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1021.012583] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:56 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r2, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001340)={{0x3, 0x0, 0x0, 0x0, r0, 0x40, 0x1}, 0x84d6, 0x63eb, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='attr\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0) write(r3, &(0x7f0000000100)="7ee0516847e8e6b2db3b4751782a836d6fe2ead4bde80a574b67a6e00602eb458a0e02774f4b079eae7571368ff0087d27bb006cfedaa50fa32fda9554f9a60c8a28abb3f54d7ddf014fa57b8e6abc3788dafaeef992c3e778a82c65fd61338f40953c1d49baf1d35aca21dc78aa340b745a1e9f74aed971da90acff98e51dc5ded7718dd30d7a9144ba02334c51a00f05819d32955ff87d3082d1b72f25170ff189d4ba3e73a0bfba90d4306fe76782814c853c", 0xb4) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) signalfd(r5, &(0x7f0000000080)={[0x3685]}, 0x8) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001280)='/dev/qat_adf_ctl\x00', 0x40, 0x0) accept4$inet(r6, &(0x7f00000012c0)={0x2, 0x0, @private}, &(0x7f0000001300)=0x10, 0x800) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r7, &(0x7f0000001200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0x9, @remote, 0x800}}}, 0x80) 09:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x100, "f9ff00"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) [ 1021.071153] audit: type=1804 audit(1587201896.488:248): pid=6933 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1414/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 1021.161942] audit: type=1400 audit(1587201896.518:249): avc: denied { setattr } for pid=6942 comm="syz-executor.5" path="/proc/6942/attr" dev="proc" ino=145301 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 09:24:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000000)={r6}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)={r6}) syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f0000000400)=""/184, 0xb8}], 0x3, 0x1000) r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @remote, @rose, @bcast, @rose, @remote, @netrom, @default]}, &(0x7f0000000200)=0x48) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r7, r8}) 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='schedstat\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000000), 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r5, 0x1, 0x2c, &(0x7f0000000080), &(0x7f0000000100)=0xc) [ 1021.556634] audit: type=1804 audit(1587201896.968:250): pid=6933 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1414/cgroup.controllers" dev="sda1" ino=15794 res=1 [ 1021.640778] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000340)={0x3, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) getpriority(0x0, r4) fcntl$setown(r2, 0x8, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x20) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x100, 0x0) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000000200)={0x2, "9ce1b7ae3e50ad98aec9e7c195731e8342ccee40888d23ad06b55b4371fc42debb81eef4df02dba14296baa4dc3d526b677d41a942f493e383d5d3e60e2371cf4d68125482b22e188fb1888e932ae4d2e764ea1c2161a3ac02efc998ee51adb7f791579e5583fc945663a97ea0de9149cad0de898f4aafd950aaa8d96207faebc745c9253f2932954e65f3f8e72dcfaa4cf93ef45c6ebcf7b419b6ebbd636d672186a78817a06624aad2f9a8ad6cf400ee658684b2d9e52e796929babae4e48a7e01625c2eac357e022e6bac5db46038d498d189834c98bc9c55b5b6b473c8e4e118f01781987587b60d36e6c430c952f41b0d4af71b81c30d62008c5fe2efc6"}) sendfile(r3, r2, 0x0, 0x100000002) 09:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0x83000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000032, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0x1, 0xffffffff}, 0x0) 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000040)={0x980000, 0x6, 0x2, r3, 0x0, &(0x7f0000000000)={0x980928, 0x20, [], @value64=0x45}}) r4 = socket(0x1e, 0x6, 0x6) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) [ 1021.941402] audit: type=1804 audit(1587201897.358:251): pid=6984 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1415/cgroup.controllers" dev="sda1" ino=15763 res=1 09:24:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], &(0x7f0000000140)=0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r3, 0xffffff81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r4, 0x1}, &(0x7f0000000140)=0x8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 1022.094290] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="02eb000000ffff00ff00"/24, @ANYRES32=r4, @ANYBLOB="000000000400"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00d\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r1, @ANYBLOB="000000001e00"/28, @ANYRES32=r6, @ANYBLOB="00000000960600"/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00X\b\x00'/28]) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'dummy0\x00', @random="3ca3c4decc5c"}) 09:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000380)='./file1\x00', 0x1, 0x6, &(0x7f0000000680)=[{&(0x7f00000003c0)="fbf5c89bed25b10671a08be1f105f7e649392afb6f750e9a", 0x18, 0x5}, {&(0x7f0000000440)="2bb115abe608e89a1925bd3bd417e81e9179264c8580a3ef0b6e81dfa29b88eca284e58afeb471eb3e5e9648c235508a35ae21418c4ed4a21fdbdb3d3e483de81c3bd3dc06", 0x45, 0x800}, {&(0x7f00000004c0)="04e212d79eb03c328c54e0543a61a8cc96b71c5c411d8ac9b119ee984cb046c0abcccffad3a0dd17ae8826ed62fa988ed4fff0451015c5118313a76e95f827031578dc43e3b8d33ae37d6ae80318c8c4388dc0f3944e8ddfb47ffac3819a21bcb4640c486209c003148262226b7ad095e537b4f4e9979f85f4c433fe46ba21427c0a9f8653a7357863c22b2e7574af174c82e1670951fc9511ea9e165815140cbd205f7812c4a33a747b5ebe6e53e63899ce0a92800aa505211fc50f641ccf63ff066e46f533174c3caebebe5fd2d70bfb9557147426dd332079c07d51b4a75732b8bb422b4c1754be1ee8b2d89e1b", 0xef, 0xffffffffffffff7e}, {&(0x7f00000005c0)="8a7012610ff8", 0x6, 0xd1}, {&(0x7f0000000600)="2fc7fd0bb39895c585ce2ebc031a4984390dc45c64", 0x15, 0x8}, {&(0x7f0000000640), 0x0, 0x4}], 0x101000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1022.140643] hfs: unable to load codepage "euc-jp " [ 1022.145731] hfs: unable to parse mount options 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0xef) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:24:57 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0x2000}) 09:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x193802, 0x0) [ 1022.482885] hfs: unable to load codepage "euc-jp " [ 1022.488149] hfs: unable to parse mount options [ 1022.613058] hfs: unable to load codepage "euc-jp " [ 1022.618374] hfs: unable to parse mount options 09:24:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) write(r2, &(0x7f0000000040)="ed32ac96f230121878ecba7259e6b6b7c6fcf83909", 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 09:24:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000040)=0xc) [ 1022.715445] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:58 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) pwrite64(r0, &(0x7f00000000c0)="47e96b964374fced15d4b5eae22b2bb52163e668986487878159949b6ac4209e618b99f4b9e1ac24739d8d49aec96b336a204387904723386f9efef8af58873cf853728ab919577fbf9a4633fc0acee67e42e8fbf0e6a18c575711afb63ef10bde3d98d81a75ec2f11b4be2a0dcd1a83b242b45b7699dd555bbd106aa112ee33227be81970351b7fd076f4d51fa37287e21e0ef28ba0b63f58bb3548cc5078", 0x9f, 0x22d25e0d) 09:24:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffeffffffffff7, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1022.890813] audit: type=1804 audit(1587201898.308:252): pid=7052 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1416/cgroup.controllers" dev="sda1" ino=15757 res=1 [ 1022.955095] hfs: unable to load codepage "euc-jp " [ 1022.964124] hfs: unable to parse mount options [ 1023.025628] audit: type=1804 audit(1587201898.349:253): pid=7059 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1416/cgroup.controllers" dev="sda1" ino=15757 res=1 [ 1023.069107] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:24:58 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x20, 0xee, 0x800}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x1, 0x4000}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = getgid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x822, {0x1, 0x1, 0x8}, 0x40, r2, r7, 0x7, 0x1f, 0x4, 0x8000000000000000, 0x7f, 0x0, 0x1f, 0xffffffff, 0x8001, 0x4, 0x3f, 0x5, 0xced, 0x4, 0x6}}, 0xa0) 09:24:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x5, 0x8, 0x4, 0x1000, 0x74c, {0x77359400}, {0x2, 0xc, 0x68, 0x4, 0x14, 0x1, "ef5adc7c"}, 0x6, 0x3, @planes=&(0x7f0000000340)={0x1ff, 0xaf, @mem_offset=0x8, 0x4}, 0xead, 0x0, r1}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000440)={0x9, 0x9db, 0x9, 0x0, 0x0, [{{}, 0x6}, {{r0}, 0xa654}, {{r0}, 0x6}, {{}, 0x1}, {{}, 0x36}, {{}, 0x3}, {{}, 0x190}, {{}, 0x9}, {{r3}, 0x7d}]}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1023.277900] hfs: unable to load codepage "euc-jp " [ 1023.282894] hfs: unable to parse mount options 09:24:58 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@codepage={'codepage', 0x3d, 'iso8859-14'}, 0x9}]}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 09:24:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffffffd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x80000001, 0x10}, 0xc) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) mmap(&(0x7f0000a8c000/0x1000)=nil, 0x1000, 0x300000b, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) fcntl$getflags(r5, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 1023.449898] hfs: unable to load codepage "iso8859-14 " [ 1023.467552] hfs: unable to parse mount options 09:24:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RREAD(r0, &(0x7f00000000c0)={0x65, 0x75, 0x1, {0x5a, "8682d783b6ba90bb32e7f93177bcb9a050bfd0ca499faa47869d7996a559af7abb9389b35309bc6f8c2015d22aebcb9fac103748de9226f543c8f24152cf3088c12b3a4ef67440cd8295f9b95489cfc3ecc6a1b3940fa8667c0d"}}, 0x65) [ 1023.631461] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1023.676637] hfs: unable to load codepage "euc-jp " [ 1023.681902] hfs: unable to parse mount options 09:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f40000000004000006469723d2e2f66696c65312c7570706572648750b4e186d4cf896530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1023.812992] hfs: unable to load codepage "euc-jp " [ 1023.824986] hfs: unable to parse mount options 09:24:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6465706167653d657563b56cb7bceaf289495291baf0470834d95b5105b2eb00a285198609935f0f742fa317f742af16733855170e28f4a078dc5ca23d57b5bb6acd6545a4c089ab6231fc0a570a4bc8719e3f5be5f540cb9555"]) [ 1024.027119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1024.045177] hfs: unable to load codepage "euclIRG4[Q" [ 1024.052816] hfs: unable to parse mount options [ 1024.071664] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 09:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1024.147371] hfs: unable to load codepage "euclIRG4[Q" [ 1024.156614] hfs: unable to parse mount options 09:24:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="636f64657061d900000000de01fd500900"]) [ 1024.250457] audit: type=1804 audit(1587201899.669:254): pid=7091 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1417/cgroup.controllers" dev="sda1" ino=15841 res=1 [ 1024.352562] hfs: unable to parse mount options [ 1024.387217] audit: type=1804 audit(1587201899.669:255): pid=7094 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1417/cgroup.controllers" dev="sda1" ino=15841 res=1 [ 1024.432926] hfs: unable to parse mount options 09:24:59 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}]}) [ 1024.545456] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1024.608401] audit: type=1804 audit(1587201900.029:256): pid=7088 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1417/cgroup.controllers" dev="sda1" ino=15841 res=1 09:25:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x61657000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:25:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65300204a14e51d67a7eb6664ef26125449322f0f614e23aed2b982973558bc3d2bb965384eaabb323668e7a970eec23445aba9b0d202f0ac183faccb01f1945a6919cab27e229edd997bb544bfdf8f44ec7c282b16bae648f946104f28298273045bca9aa45dd9a2526ab3b6fc3031409b63968f30e5be6f0d0c738625ebd919777"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1024.666158] hfs: unable to load codepage "euc-jp iocharset=maciceland" [ 1024.673603] hfs: unable to parse mount options [ 1024.769129] hfs: unable to load codepage "euc-jp iocharset=maciceland" [ 1024.785191] hfs: unable to parse mount options [ 1024.878150] overlayfs: failed to resolve './file0NQz~fNa%D":+)sUһSꫳ#fz#DZ / [ 1024.878150] ̰E')ٗTKN‚kda'0EEݚ%&;o 9h[8b^w': -2 09:25:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c2ccf5a4e59e859dd24f7972eea4ca8d42e913ce9631d7ac6b1203c630c2e6119f4e1c9766ef64636f20eb479e79c5a226cd8c7c6d4c45e7668e99295bc8216e3760b4000"/84]) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x260001, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x3, 0x3, 0x3, 0x2}}, 0x26) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff4}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1d}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) [ 1024.963659] overlayfs: failed to resolve './file0NQz~fNa%D":+)sUһSꫳ#fz#DZ / [ 1024.963659] ̰E')ٗTKN‚kda'0EEݚ%&;o 9h[8b^w': -2 09:25:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sysfs$3(0x3) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1025.071023] hfs: can't find a HFS filesystem on dev loop5 [ 1025.174263] hfs: can't find a HFS filesystem on dev loop5 09:25:00 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x141800, 0x0) [ 1025.407468] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1025.432194] hfs: unable to load codepage "euc-jp " [ 1025.437266] hfs: unable to parse mount options 09:25:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xc0000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1025.532156] hfs: unable to load codepage "euc-jp " [ 1025.537208] hfs: unable to parse mount options [ 1025.583162] audit: type=1804 audit(1587201900.999:257): pid=7163 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1418/cgroup.controllers" dev="sda1" ino=15764 res=1 [ 1025.634411] audit: type=1804 audit(1587201900.999:258): pid=7164 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1418/cgroup.controllers" dev="sda1" ino=15764 res=1 [ 1025.892596] audit: type=1804 audit(1587201901.309:259): pid=7209 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1418/cgroup.controllers" dev="sda1" ino=15764 res=1 09:25:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x1, 0x3, 0x0, 'queue0\x00', 0x100}) sendfile(r2, r1, 0x0, 0x100000002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) [ 1025.939030] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x297}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x1a5) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'team_slave_0\x00'}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1026.143006] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd29, 0x800, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x34}}, 0xc044) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x70, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r4}) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x8, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x8a94, @dev={0xfe, 0x80, [], 0x31}, 0xfffffffa}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}], 0xb4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r5, r1, 0x0, 0x100000002) [ 1026.565130] audit: type=1804 audit(1587201901.979:260): pid=7243 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1420/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 1026.603307] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x50) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000340)={0x8001, 0x1}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x8, 0x0, 0x0, 0x800000000000}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1026.690353] audit: type=1804 audit(1587201901.979:261): pid=7243 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1420/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 1026.797059] audit: type=1804 audit(1587201901.979:262): pid=7243 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1420/cgroup.controllers" dev="sda1" ino=15795 res=1 09:25:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = getgid() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x5, 0x3}, 0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}}, 0x34126c53bf4c015a) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r9, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r1, r8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) [ 1026.863046] overlayfs: failed to resolve './file1': -2 [ 1026.879128] audit: type=1804 audit(1587201901.989:263): pid=7243 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1420/cgroup.controllers" dev="sda1" ino=15795 res=1 [ 1026.898766] overlayfs: failed to resolve './file1': -2 09:25:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xfffffffffffff000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:25:02 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x6, @sliced={0x7f, [0x9, 0xfff9, 0x100, 0x4, 0x8, 0x0, 0x1, 0x5, 0xfffc, 0x29, 0x5, 0xa7, 0xa245, 0xff7f, 0x5f, 0x8000, 0x800, 0x5, 0x800, 0x9, 0x0, 0x3, 0x2, 0x8, 0x2, 0x5, 0xfb86, 0x0, 0x81, 0xfffd, 0x100, 0x1, 0x3, 0x3, 0xfff, 0x2, 0x1f, 0x4, 0xfdec, 0x6d5, 0x7ff, 0xd8e, 0xff, 0x401, 0x0, 0x4, 0x9000, 0x1], 0x8}}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="636f6465706167653d6575632d6a70090009afad8fea66476b2d997956ca749cf5a2c00a0e1d2eed2e3a"]) 09:25:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x82ed9bfb0a50567e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffeffffffffbff, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x114) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c2e7765726469723d2e2f6275732c776f726b6469723d2e4966696c65312c75707065726469723d2e2f66696c6530922928704e59cb4f4ed0b11cd4395acab1a5ed2fa4"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x3f1, 0x100000002, 0xffffffff}, 0x0) [ 1027.144579] audit: type=1804 audit(1587201902.559:264): pid=7270 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1421/cgroup.controllers" dev="sda1" ino=15771 res=1 [ 1027.186609] hfs: unable to load codepage "euc-jp " [ 1027.192126] hfs: unable to parse mount options [ 1027.205331] overlayfs: unrecognized mount option "l.werdir=./bus" or missing value [ 1027.247164] overlayfs: unrecognized mount option "l.werdir=./bus" or missing value 09:25:02 executing program 0: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000380)=0xfffffffa, 0x4) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:02 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000000c0)={0x0, 0x3, "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"}) [ 1027.455089] hfs: unable to load codepage "euc-jp " [ 1027.455101] hfs: unable to parse mount options 09:25:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) mmap(&(0x7f00001a0000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0xda9bf000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000200)="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") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1027.501693] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@nfc={0x27, 0x1, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)="0fda4f165b39784a3ec6072be099653cf892f8ff7e908bfa4c46c5aa775067386490ca4da6094dd23fab56bb93739cdb2889aed619036636256585bd58050e557179f302bda8af5ff544cc29cea8be060fe4bb5de4f0ae87331ef17058fd27727aab2c1b25150ed4bedac0e97982e19a5231ece559d330854db0837c84dc508f1db3f1a3cbb96373b2ae4ff5e9", 0x8d}], 0x1, &(0x7f0000000580)=[{0x90, 0x1, 0x3, "11b9a4cbd350154d9dc9c25efc31b947635f1cd1289c99cef4a63c6e96d40965f9d219298930131e18af0ac5bb65b567a5007f4fb70c3668585c4b8aa7ca31d07d0c82ae6ee70aaa77e9fb08bc1d6c27796c468fe5d4535b71d99aba3bf775d54fa752a089a8460a9b588febbd15bca9cfaef26bdd0b4311e6aeffa1f3"}, {0x1010, 0x115, 0x4, "558ff10e18a4f0766b88947a38c64a0e3f805ab47b2da5ee98cdc47fa0b74f463fd057b3f55fa1527b60cf55ff7432a01af6fbd238e2a15668223d46f3c478574a77585f8410e72785d73dbea2539bb2692f90189e031db73a8ac8457f444c8547ed391b25e1ee0cbeeb17e0c34cd5f57af6b8619e387f3034ce268d45a72177bc839b7dd4ee93ffdbabd721188a0aee859f4b2ecad82cef9731fff89354cef66534e9bff5adc94d7042ca965d92b8f1b3baadcf47b63591a37359ea20b9b46e7ee7b4dadd40c3add0805cc0beebbaf83417910d3ae410235466d31376fc133ba2da4a899b693f289d9d96b9acfce1a45660e3cb412bf586a8a1d3580bc5e5f4dfd52663ef10346f25d507f555b396bc7722e51835a8e048fb2ef73e622c2bef81d3ab6fe551ba153e62faad843b087f8b26a458ef0682231868edde2f4f8b8dda924139993f0d82f0ce5f36d8ecc4f7e7d672a5a649bb5f77ed0fa14f6da042bcb702cfc4f4bfb12bd665f0ce2d1b6589ae235f81ab9f4711cd40895ab74f939d2956ada56a624dd9f3d53572010505676b0bce9bc55eebfc031d51cd44a62f04937409098ac1a57279cb51297f3928c995ba3670782a4d29c1d2e74a4e3683aa162d607d97ab1e9e225efa4c2137dd28539df657eff96778a3d1710e5cb57d5731484a559d432df57d036de26ba250aa38af53ee943c595126cdaad8c4aceb6911c69832e72c74d560ae0ac06321307e869f57336d1cb61e93bc129fcc9d92c434405140ae1426d8e1034b9ad406c6aabdcb204534f90db5c70b41b72093986b493b6101beb5758ef57431f015fe8a2ecd6c30a1c0d319f504ac2611adcd1a86d8e58a4996bf26e70c6748679a7be0c2166c7efd6ae3587ff05506a81e745a35e06119be22fd1ba7e0233ffd8c57698998fc8f8f46c1cb6f1639c9faeb59507dc0ca8fdf83ece4c339c2c0a568f6105f94ac130d2742fb2f3abe4a957605801502b1df185f84e83941a296332044b07a6377cb99fcc8e0ecc5b0a4a16d99f460c3d171e4ebeed5124fc4e9fc194a3a1ca2601222818ddb5ef47696c1b161088593f8a400b8e1ad9c1bbd2b3d90b65fa617e00e4f6779d0e72e4acec375d2a01733617d97f61bec367a547bfe5ac5d1a955417b3550d2698dabf57947ae10a8a0f447668a855c96aa4c81b73e99c4e9f84f147d8df6445d17624d7ff6d50add5f54305c40d630f8effdfa01daa869443c6bf11a332adfbb55df4aca759389fdb46e8651cfb87f22ba7a9dda41b19e0080da3851204146158394bf528e891a32fccbd296cf9dc9b19ace4d12b5bee24026ef6670d99ae264d1d2db122d46abb3c762647008ccd86ed2952b8d77b0dc8e2f3961328bb7a696b679cbfd4d82b3e2dad0111d36fc4aa1d3c2fb22a6a673015f6c926d3743d7ead930a1922da2484fce91ac699de427ff542946a016fada2a9d3fca681d2a060b6e6e03077a73146076d3775ea5fa8518f2462897f0fb52faf4b529b86c915d938f08ec62d7b3d71c03f1a09719797dc8e79018d7e4eaffbae14f4836fac6deaebd78f6597cea852efbbfe74765ba6b19bdc56c0de318058864ffac63ca5c8c4e8cac0f99ce773a2d787dbc31c94750b89c592ae59e7b5934bb7f8fcb85c9c534e9c6bb54fad5490a49bc3b3a0fd6b6d40af8c5af688c1448ff68fb7356a2b7beb646f55ebf82d869190c79b00798c1ca70381b43aca9266ec933e061dbeb24575e289bd3aceb0a116f9153205588d24d76d9b9c989a5ec3d7bd75fa164f7c7b9b80d8bf50efff6f0c22afb72f023279a249bf046fb24b2a8e37aa4b990e0df56391373db171b7bf02d4f1ee2c7a2133f4d11053727be248ec4ee9f115b6edb72dda2ebca0589f0b2bec5260ea45b6670e354f1e87b22eef4bf6304c219a654dcbd5e26d98945f2844ed9f448eedc747aca7aa334ea324a2b45dccd37afde8a524808933082b5b81dbcc57c435ae548c3c8e0270df49449e483baf8f2829bb1dd6391d27294ae24f92902e61950e2606f806a7ef9edbebf42595e3ac9315433cd365778bc85736a739d30c53b49869aa6bbb047cf0729c615d40b26addae65317a9bb0290d636a6dbdc4f84af195b0edfd1fc02dd854beb8beca8e274619b9e56e2352c4852a3d7e9084d6d2e3e2da96188051f40b4f1401de0289ad40cd287f86d00ad1d8ca6d77a0a47ebac86694eb2ec64a0eb8cf3aaaa298e81a99a6e39c9b9180e52badaa1ff5fd50bd60da510af35d9c59170788a4f1e50325d527b463fa085e71e8ac471bc856ccda2a640a5a90503ff3cd4636f8fc319421273f4e8e2e9ce821ea7fe93c0ffbd3a733134f67d99709f842bd4b0add2e57ee9d5b778d8cbb443ffc0cbb04dd62352116c0064996d7c69b65c936905497139e0e02f911de877c4fbe473edba0141a59f839c6ef192a3655bd48afcce7349938f97d6d52652ca4a164741573f92913ceff52a9ef070d4a0a10c2f6a615a6b1b0a79de8ff7a68d50fcb2ce55354728e3f24a1870a84ea8e595d566ecd75103c0c4d1f5eb60a87e64dfc38c5a5a2a5ad8a16dce9df73188435ac7b314a1adeaa9c698abc1addb87384dd797051a3c7dafd7326dbbafa373e197f8a7171cd6bf766fcdd45fc9bcc0ced49167694c7a1ac2238179156bdb90cbe2433d6c55362a265e828697debc79de165850539cdee2fc0ab5863435f3ee05aadccc8d58af9fce96e10da7d41f843aa50d1b876e72f9f422453b275c2dbd9dbf22aec070b1dae66bb7c1dc21f79456f3fc4e17b8df3eb927bd54aa5b988cabae2e2f9e3397ce78547e0defb6fa26d3e8108da8b894f08dee74e09a9e077ad73eaa9025dafa8b84bf8ba6080281434634503029936440856cecd94e106224873ebb7110ae9381f115467ee5a600c6656a0840da8907163f0a4b6c9ca610ef4d6c088aa12e655007b288c1e646b2341819906d8ef1f0329ac221a68a92a9dd64bd98c322f1c21ef11072d0c39ee5cfbc333bcf90206944eeb59c7736e7cedc0182c5d285497515efcff60872826b89ae58891bb7769d21d6acc7d13883435d646b0903fa7d2b608c9678ee50ed4e0141c0857ecbed2dba75db3bf2bcdcade516ab1e986ba6bea556479d8b7bc8e114dc2883936b46dc7e7c8cac5c6ae224f7d12b566cdedbd122512d1ca537942a1aaa53adc2f09df0d142a989748a89279aaafebcc03b7b9e12d962a5edb966524a79980a5bdefcfe4c9cf0c0ef40767febf9a3c8b93673049d21669b7ef7378827206bb2a92c12ef382174b2b46f784966223af5040f4dd39ba6d7e02093ee705b0595ad5fc934c0a240fcdd27b1571b53d52449fbcfe95c0c3d13a1b19e311ffada168ceef86a19a6103b29e2791246ca64929a28a6e1242a08bfaa87d7de6633bbc40f1f2cafa34db65c9e9300a30baee3750c9dbc656146e76e57887f130b7caa3c020e1d36fadb37bf03349ef4602f9939679d9aa2aca42943b09abb799d7cb9a81387e4e5c081c9d7c0b3f65658adf71f65f0e9a17002ddff12433b265b030d2a7baa09bdbdcd2d07b450db2b832fc5871f3b1a9f3cbf6723b73049aa0d623fb81a442eae7493341f9ecd49e623f0099b47cacb8fd6e4b754b19c11380ad5def6f1e07116b1bec5dfbb46d98fc334d64e9b50dcc3e1678d9f82a16b6a9e1d4e32c79dbca33d60891ab87bbe9a684899b026d33ac3bf4461cca3e529339a61882555728e332ae2782aecefc20155a73996889d9c8ceb0bbb56b90e897ad9ac346dd274b1aef86434532c462de8ceb39fc44eb14d9200ab003f1e85dab3d823c873e39a8ead98fb080915e21b29f16f3943ff2500e055ecebaa8fc7d383c31c63d509f7bd04e69b59c5bae7828a559efe7e7a99d159fab051bfe0323661df0706803a1d6686c246afa4d04bc77f83c06e162d7627341d4a64a6f6043e292dc4f04a05ea284759b29ba315730df690240e5d5085eaed53cadad2aa19952bfbff188d2fb211a80d537164b11b7f362fdc013562cfbb433903ebe285f2da04aa6d8783108beecd95231116130d2a9204491b0bf303185ab517c32f0871e111e5e2e1a40b04cf38105c3422bce35ba91e940451df8ce593d14c4914a8e4274b287513eb3fb4af8cc50d806d0b2986d3e0fbe62972e1c285499f3b1574bf359e43d4494d2318e50e3440a7dd66cfdcf507ad48116eb284ebb9d50ea9bbb3133b24cb86c631f88f1a866528158d09da1a4d28aefefdb0d9e12fef5b034c91c5e8bd10620e9da74875a7b10def52e1d64110c27c121ef783c8ccaab5072d4f5fd2fb2efc71254bad220f550968db94f99e59c7fe57e7a08dd5eb82f54b3dd0ecaa724acc21e5356bab6f1da29a86a170eed8f21f7e7d185481aaea5284a7ec42db393c067cdf6b8d7910660a9f33601e5d346ff5a7bf2a2b2a8cfd47c8475db838f54402355022b18deeea3662fd52570401ee7e296fd693a61dc7b0e6bfcd1b667ffc8af63151a39751962b045a8273ea7ffec4ae3c1b7791f452ac030f779425f02f2eaec72f8500e6d2baf39032599ee7dd846f215ddca552960d4ac3900377568fd39e84fde6aece32fffb997db569e25d610e63ce847b2542bce1231783b3c682968172af5ed1456443874a7a7a949c5dd4b1bfeb394920a7f12b752c94ae65d93660adada41bc3d5b4cae9497950423472fc96262c020ffbff992fae18bcbbbd9c074ea4a573704448af33c05b414871c847bab68f665bc0dc83cdbc034ff5de73599ce49e16c85a8f23cf6f6bc59ba85334f207a0abc3750c00a471894b2224bafa92e77284dc27a05c3c5453485c03a152bb3a0f0558c8bde17b927d52041a7caddc807fa1fa8e2c61013e034b428031edc6ec94dc9a3d78b0f735861e580782d43a2ae80cb40569c0103a09986f0c3a21b1e08a3b18a902c26471433e80c9828f73f196ec0187b8c92e1e39210b5be0b32a6990b7fa1746a7dfc1c9dddff549a1c2135b4988a6afc70baaea63afacac08633535a8718179b7468019bd68e5abf8caa5f96e8ac78557fb51229b5cadeba51231995ef1d27e6f7efd849d1cc8fba3f42540b36737108da20ac866e56abb9ab82786d463cb489541f8a81852ab7f66ee032c361769b02f64a4fe141272f1915120ac6bc17d61bd732f4167f3981a79809f2ab000cddde7959d10e312207ba19a1fbc5e07d173de2d28ffc5922824878726e67f22fa634382eb8156452399f9c63001298b4d12d34e44193d8748fc11585365a542a5dcab101593ba8e4daf42ff65557409fbceb01dc972ffdd71418a44626d78264f0bff14bc76452dfef2f1660798b4b4b16d77974a85b81e96511104cd00e24d261ca12a53ab48dca3a486bc3aa44f9c34a9bf3e9fd0db92dd5a7337e8351b7b2b740ae99f1e019bec55cd56a64a4c05971248e8fec8782b304b6fa2f9df6790f1ce18ed336767fa7ed75e7279a166f6241934a425bd8ee87ceb2e4a16f9cc38a652930fbb8c4476275d3e52284c4cde0994255cf95363ed49d29e3ef53c704076484a06ec7f839b6594b09faca139ac00660d96ad5acba0af28c9463f932da35081a69e886a48375b70df3d168c423ffe7e3000853b7635b97d35dd6447c9831b70e243ba09b5e5db7cef18f9fe291a4fa6811c9a60b5de4848412971ea329ca9580a057011cf027ec4fdc55467c540e3308792920f7a5fa9acce71e5a89242e0136fb69a95c739508317fe98aa9b1fc6d613d7b07204505f78deb0a44658"}, {0x90, 0x6, 0x7fff, "edd97c2dde9eca1d7cc8beed934bd3bd6041672220d4d40ce376d833b0da7fd799aed9b611465c441f9971cec2290da5eb24df8f896d3b94844e637fbe6a4db25e98132978f52a221f27e34c97d61464618f767e94b010d8eee5cfd8532d2ebfe5c7488b899c4c960989d6e0600970bd8d08175e1440355b49e1f1cc14"}, {0xf8, 0x31f, 0x77c8856f, "d5fe994ee9264ace558ad00847e4d9e4118421fd4eff54fd8e42a9fff7f7373c1f2c7d72d659e9e261e6d0f2040f8886320536a4f826064c23abd389c0a327b37313e8549ef8a372fe730f34df55b461b3d0d81d0f3662dc6b643ded40fc71e7286a6a0051ffa178440619505322b511836c4715b12958436dc1394a9dd17c0296f2720c9dbd0ee2cf56a148fd4135f78becdb3f6b261ee743d916fe009b79c30185ffeeea01cbdcd4151d5e5db6642ac4af6a1b4b9508bc37999b3995c2bc4838312a13e17fef76ce2e999c6e27ad498e3ff7c0e05c4791deaf3fe41e10d7d3faaf"}, {0x68, 0x104, 0x3, "2d8af1322ed5edfcbc218994f7ea984c9d4b7ff47e2c8b18e451f515872fb62bae3f158adb28618797bcc489c391fa107e902fdfd09108bd63e3b0f3a9307c55ff5d05cde979f81e22ff232f22f413734285b6260f9c"}, {0x28, 0x10f, 0x5, "883ed42838ae8a1d0e1b2e80d7453d934f50"}, {0x80, 0x114, 0x1e, "8d573ce77e8e82891f49489a40cbea2e38b6faac2cbb82953b499475261d97d586792dcd580f94a56dd1b54a8b80c778e9e42911b0ec9220b4148fee3e1c80ed7435c4d7af507374894f4d63df7c801a6e726452715e73fdef51e94aa15c7d5ae760b7839c387517d0f5"}, {0xe0, 0x116, 0x2, "68156bae14cbccc3d220c48f8abfbbb8beb18a0bf64fc93abd664ac5a154fc19aed1c1b74228914170ed14b655e6fffce4931ef721b53a0478d8621e06cb900fcf8c0870d8725f85a1946117bf3ccf6457786a5a2d54546d6c87d40a3aed128d661d2cfdba2e796ce014fc36eb0c5f2748556cb0594124c3c7e9aeb0559902b621a926d2fc744458ea840ba74e857728344a7c3dbad4bd4c89b4bd7f69854f74239dbb00fcf6a2327ca1b1ba213cc682325fc0b93a34709ac14ac96b5f461d5580cb227cfa0bca58bc8af4d6acc93a"}, {0xe0, 0x113, 0x9, "a980bddab53236bfd8bade74db4eefdb23829a6bc2941a63f4cabb12a17a418e0f1db7a484313485322be7236eb23f40180404aa77ad8fc6f30146ed7ff1eaab16f9db8d8a5a347bc03689fae0509416917c6824fe0a614473812bd38dbe9afda786aff0eba8bb441cc5490a0335297a4607fbba74f23d585dccff30b9cfa7168043a1fbde4da73751275ddf487749ea6fff1b61677704bf94f219fa77500300d8ff95838857df1cc681f8c93d9219d94e1865dc03d91840fcd28859943008e2ae1605b7cd15a70805db85"}, {0x20, 0x108, 0xaf58, "17b41e1ef5c6629f96c52d63c2"}], 0x1518}, 0x20040800) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x9, 0x2, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) pipe2(&(0x7f0000001ac0)={0xffffffffffffffff}, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000380)={0xed, 0xff, 0x400}) [ 1027.851704] overlayfs: failed to resolve './file1': -2 [ 1027.905470] overlayfs: failed to resolve './file1': -2 09:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') openat(r0, &(0x7f0000000340)='./file1\x00', 0x4200, 0x12) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1028.014095] audit: type=1804 audit(1587201903.429:265): pid=7294 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1422/cgroup.controllers" dev="sda1" ino=15779 res=1 09:25:03 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@codepage={'codepage', 0x3d, 'euc-jp'}, 0x9}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r2, 0xbb, 0x46e}, 0x8) [ 1028.191836] overlayfs: unrecognized mount option "wo" or missing value [ 1028.236176] overlayfs: unrecognized mount option "wo" or missing value 09:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6a7765726469723d2e2f66696c65292c75707065726469723d2e2f66696c653051987694f5309f869fecb5de6487055292c732add7ba9448339b8baed9f4865a0a0f6ca7d1540dbb93e165d8b36c2de60b51e843bf94eaf3eccddc6e"]) r1 = msgget(0x3, 0x450) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000003c0)=""/83) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000907c8587e2e813c400009500f8ff00000000"], &(0x7f0000000140)='GPL\x00', 0x3f, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x10, &(0x7f0000003ac0)={&(0x7f0000003a40)=""/90, 0x5a, r3}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x20}, @ldst={0x1, 0x3, 0x0, 0x6, 0x3, 0x8, 0x4}, @alu={0x2, 0x0, 0x4, 0x1, 0x2, 0x18}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0xa4, &(0x7f0000000240)=""/164, 0x41000, 0x8, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x4, 0xfff}, 0x10, r3, r4}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) getsockopt$sock_cred(r6, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r8) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1028.314456] hfs: unable to load codepage "euc-jp " [ 1028.320308] hfs: unable to parse mount options [ 1028.449610] hfs: unable to load codepage "euc-jp " [ 1028.454763] hfs: unable to parse mount options 09:25:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESHEX=r1]], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x7c, 0x0, [], &(0x7f0000000100)}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1028.499244] overlayfs: unrecognized mount option "ljwerdir=./file)" or missing value 09:25:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1028.554995] overlayfs: unrecognized mount option "ljwerdir=./file)" or missing value 09:25:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636f6465706167653d6575632d6a700900bdc2df3a703606fe0d7543cf4cecc93b4b388d76841bf284c645a64f5e228a6b79cf7ed284658605b6c41d51283a0966be6e26d42990207a8649bd05e48e7406674ce5a31f0e9ca29e8d74b3ff571502429278c353a451733bea604dbc490b7e8fd545f86a0762d3c2f54e8faf4d8bddf8a803b38078b460bc461ae37489a04974cb69f38d2b1dfbb0dd2a586c47e67f7c56186e7a5b56255470d5ba6c47f5f78a7800907a2373b14baeb0ca4a5682d8b26a60a9da5685f50e603f3c0dd84c100385917fe8383ffaedf582b53560437fa2488b44b4bb505b48c1f4be690ea05a07dd6d1f37defd85e454d957f4d903e6fc1f5ae093a349d9be9a905f95b603d6e3d9b87047283879588710c46ac9c20c38f72070269a797a587b857f92493130855b182f9a7aa5ce647bdca9cb910c65862f1e9dbcb658ccff7524b9e89729a4f43be4e3df430addc8fe9e4bf896a81fce3f64f14f777f4d2e6a9adbc7ab42eb35a93df373b85c0f14f373a845b086671a7320d22df9560f25428fa8b661c39c52b08227c0f9ef25661a20"]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) accept$unix(r0, 0x0, &(0x7f0000000040)) 09:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7c8f9118}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x20008040) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000040)={0x990000, 0x400, 0x6, r3, 0x0, &(0x7f0000000000)={0x990af5, 0x3, [], @value=0xfffffeff}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x98) getsockopt$sock_cred(r1, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000080)=0xfffffffffffffed6) [ 1028.726973] hfs: unable to load codepage "euc-jp " [ 1028.739523] hfs: unable to parse mount options [ 1028.825879] hfs: unable to load codepage "euc-jp " [ 1028.836031] hfs: unable to parse mount options 09:25:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7fffffff) socket(0x10, 0x2, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) 09:25:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) recvfrom$ax25(r0, &(0x7f00000000c0)=""/72, 0x48, 0x2183, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="82", @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x401, 0x9, 0x4, 0x4000e040, 0x3, {}, {0x1, 0x2, 0x7, 0x80, 0x1, 0x7, "e4cb11d7"}, 0x0, 0x4, @planes=&(0x7f0000000200)={0x9, 0x1ff, @userptr=0x100000000, 0x9}, 0xffff, 0x0, r7}) 09:25:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80005, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x1, {0xb99c}}, 0x18) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x4}) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000000c0)={0x1, 0x80000000}) 09:25:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000040)="92e40a8e", 0x4) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)) [ 1029.017847] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000440), 0x10) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b04080cbb2e2f66696c65312c7570706572640900dddbbf2c3ad9371800002f66696c6530b16949b801c38882839af6f312fe3b4dadd2363190c915d94b184835103bdcfcf044b89e2a5e1f52d958c092d30ca53806"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file2\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1029.111423] hfs: can't find a HFS filesystem on dev loop5 09:25:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x0, 0x4, 0xfff, r0, 0x0, &(0x7f0000000040)={0x980914, 0x0, [], @p_u8=&(0x7f0000000000)=0xc8}}) prctl$PR_SET_PDEATHSIG(0x1, 0x33) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:25:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) 09:25:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000005a00000000008011edbde6ca90a067edbbc1565f4496772e2e936e4a9bbd1ae16b631f95061d9bb94030b2565a1c1cc27b0554cb801c9f6b20f2a89b8490f479e56a53f41238abd155ae13c9485d8e62be9c88af8c54a8f1c53a8c1376e2ec8033f6181b"]) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x3000, 0x251b, [], &(0x7f0000000040)=0x9}) [ 1029.300093] hfs: can't find a HFS filesystem on dev loop5 [ 1029.365800] overlayfs: unrecognized mount option "work ./file1" or missing value [ 1029.385051] hfs: can't find a HFS filesystem on dev loop5 09:25:04 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6465706167653d6575632d6a700900220c3f8a3d195d4d432f14aef7f47d6528200b76faa1e9d385f2bffe5da8f7eb79086b7081fb4fb41c5404295c5a124a17cbb427b55664dbe226d7"]) r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1ff, 0x408203) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x1, 0x34343452, 0x3, @stepwise={0xe0, 0xfffffffd, 0x4, 0x7, 0xf639}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$9p(r1, &(0x7f0000000040)="9248d8f0ead074aeb80cf38bdb4c4e2c09aa8d412627c49234f2cbb41aa253a40348ff97b6a55d5e506a98", 0x2b) [ 1029.424115] overlayfs: unrecognized mount option "work ./file1" or missing value 09:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0xfffff3f6}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1029.557863] hfs: unable to load codepage "euc-jp " [ 1029.562983] hfs: unable to parse mount options [ 1029.707958] hfs: unable to load codepage "euc-jp " [ 1029.713019] hfs: unable to parse mount options 09:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, r4, 0x301, 0x70bd27, 0x101, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @private=0xa010100}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x48085}, 0x8800) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/wireless\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56) bind$vsock_dgram(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1029.871222] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340)=0x1f, 0x4) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xffffffff, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1030.008757] kauditd_printk_skb: 4 callbacks suppressed [ 1030.008768] audit: type=1804 audit(1587201905.429:270): pid=7431 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1426/cgroup.controllers" dev="sda1" ino=15779 res=1 09:25:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r4, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x14}]}, 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4158, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r8 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:25:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x24000006) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x80000000000000, 0x1000, 0xf7, 0x3, 0x20}) sendfile(r2, r1, 0x0, 0x100000002) [ 1030.347651] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000300)=0x1, 0x4) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000380)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f72840a6b6469723d2e2f66696c53312c75707075726469723d2e2f66696c"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1030.632168] overlayfs: unrecognized mount option "wor [ 1030.632168] kdir=./filS1" or missing value [ 1030.717501] overlayfs: unrecognized mount option "wor [ 1030.717501] kdir=./filS1" or missing value [ 1030.765089] audit: type=1804 audit(1587201906.180:271): pid=7466 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1428/cgroup.controllers" dev="sda1" ino=15857 res=1 09:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x460a00}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040841}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000028, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000340)={0xc7c, 0x1, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000000)={0x7, 0x6, 0x4, 0x200000, 0xfffffffc, {0x0, 0x2710}, {0x1, 0xada382977bd6a249, 0x0, 0x80, 0x6, 0x3f, "233fadf5"}, 0x40, 0x2, @fd=r4, 0x3, 0x0, r2}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@local}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "539951b58c473be6", "674de0d25831a9e423d778a1e89ac25f9b2a8510c595a76ac0d5a85c1fbcc310", "9481bed5", "689b239252ca014b"}, 0x38) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r8, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x14}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "3300f4d5c58c72"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "44f13a0747d8846708ae98bc4615d5"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6f68aea7c7"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) 09:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x408, 0x0, 0xffffffff, 0x0, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000340), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x3e}, @private1={0xfc, 0x1, [], 0x80}, [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0x0, 0x0, 0xff0000ff, 0xffffffff], 'bond0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x8, 0x40, 0x3, 0x2c}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x6, 0x6, 0x1, [0x4, 0xfffc, 0xa6bc, 0x2, 0x1e0, 0x3, 0x1, 0x7ff, 0x800, 0x4, 0x22a, 0xfe01, 0x0, 0xf91, 0x1, 0xfffa], 0xc}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x40}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x6, 0x40, 0x2, 0x0, 0x3, 0x2140, 0x8}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @icmp_id=0x66}}}, {{@ipv6={@local, @local, [0xffffff00, 0xffffff00, 0xff, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'hsr0\x00', 'macvlan1\x00', {}, {}, 0x89, 0x1f, 0x2, 0x20}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0xd, "a261"}}, @common=@srh1={{0x90, 'srh\x00'}, {0x2f, 0x4, 0x81, 0x3, 0x800, @private2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, [0xff000000, 0xff, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 0x2004, 0x50}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv6=@mcast2, @icmp_id=0x65, @gre_key=0x8}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffff00], 'ip6tnl0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x5e, 0x20, 0x4, 0x27}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}, {{0x2, 0x3, 0xefc5a8092dcc7e73}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@private2, @ipv4=@local, @gre_key=0x1, @icmp_id=0x67}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setflags(r0, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:25:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000000)) [ 1031.163583] audit: type=1804 audit(1587201906.580:272): pid=7485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1429/cgroup.controllers" dev="sda1" ino=15874 res=1 [ 1031.241360] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x43000, &(0x7f00000002c0)={[], [{@fowner_lt={'fowner<', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'vboxnet1%GPL*/'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type'}}, {@smackfsroot={'smackfsroot', 0x3d, 'xvmnet1+'}}, {@measure='measure'}, {@euid_gt={'euid>', r8}}]}) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65302078761a456574312b20272020122074727573746564657468040ac4f463311ab6223ffb7fddf8f55ed255ea5a59f1c0eb31a50a59b7e636ee50ff7ed94bc06e7ead123df3814218d4fa5678c4de1b2870202c3c81245f49ade820bf0f794dd682611ae62ac110887e3bc1dd639371452a27fac879c8846f16d77be75ce9c5afbccea7f458b45caf66836874d785af2abe3f2cd554923392cb9ef44d9db5bd513ede22331b332decd7caf6fc"], 0xb6) [ 1031.453865] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:07 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x5}, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000340)={0x4}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65306f2d00a2cd1c4dbb2771a16365ba0317224b3bc44691354f31d080d8710fd54a3eeadd5ddb33e29a87990047c3f8603dcfbf19cd04d643a16634604711109aab58033d188f19a8d5cd18c72b7429e253122b67339141556ecdc2706e5ba6e04d53f43e8c1758c7baaf73d3f70fe03e464eb28a2c8ae6fe2cbad34174fed65e00"/185]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x6, 0xffffffff, 0xffffffff}, 0x0) [ 1031.779112] overlayfs: failed to resolve './file0o-': -2 09:25:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) recvfrom$llc(r6, &(0x7f0000000200)=""/4096, 0x1000, 0x122, &(0x7f0000000040)={0x1a, 0x10f, 0x0, 0x2, 0x3, 0x2, @broadcast}, 0x10) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) [ 1031.822220] overlayfs: failed to resolve './file0o-': -2 09:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='loweir=./file1,upperdmr=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1031.916631] audit: type=1804 audit(1587201907.330:273): pid=7512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1430/cgroup.controllers" dev="sda1" ino=15955 res=1 [ 1032.009793] audit: type=1804 audit(1587201907.370:274): pid=7512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1430/cgroup.controllers" dev="sda1" ino=15955 res=1 [ 1032.072538] audit: type=1804 audit(1587201907.370:275): pid=7512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1430/cgroup.controllers" dev="sda1" ino=15955 res=1 [ 1032.141370] overlayfs: unrecognized mount option "loweir=./file1" or missing value [ 1032.193100] overlayfs: unrecognized mount option "loweir=./file1" or missing value 09:25:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) eventfd(0x1db4) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/connector\x00') r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6], &(0x7f0000000140)=0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x8000, 0xdd, 0x6, r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) preadv(r7, &(0x7f00000017c0), 0x0, 0x0) r8 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@private1={0xfc, 0x1, [], 0x1}}, 0x14) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x10000010, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0xa10000, 0x3ff, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090b, 0x4, [], @value=0x1f}}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008850}, 0x4000010) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYBLOB="2b7a1b2116574850078d7b5f3cdad5cfc076bf9bd0ee755bbea9455ff2880455", @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESHEX=r7]]], 0x4}, 0x1, 0x0, 0x0, 0x4004058}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:25:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x6, 0x10000020, 0x0, 0x7, 0x8000, 0x0, 0x8, 0x0, 0x2}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)=0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={r5, r6, r3}, 0xc) [ 1032.545284] audit: type=1804 audit(1587201907.960:276): pid=7533 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1431/cgroup.controllers" dev="sda1" ino=15874 res=1 [ 1032.635389] audit: type=1804 audit(1587201907.990:277): pid=7533 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1431/cgroup.controllers" dev="sda1" ino=15874 res=1 09:25:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x682440, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1032.773998] audit: type=1804 audit(1587201907.990:278): pid=7533 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1431/cgroup.controllers" dev="sda1" ino=15874 res=1 [ 1032.808964] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r1 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000400)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1c) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000380)="24e180f289b1c7ba32904a1e2bb1d7529d36d5c6e22b281bc8e3ff6394afd28e062051bc469b6bc62377e6f92e33d577de2f4496754b128169333171868ae8249c2e23314e1deaf39a7d9ce86982300d7607b30e7b7ccc5d6e70daf26ddc415fae7ee919bfe31e7861c17da53a9187dd761d38a74228785f6d173ec93a21022a", 0x80) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c6f726b6469723d2e65312c75707065726469726c65300000009eb22f82be93cd63f335130000"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1032.854369] audit: type=1804 audit(1587201907.990:279): pid=7533 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1431/cgroup.controllers" dev="sda1" ino=15874 res=1 09:25:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe98) 09:25:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 09:25:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000440)=ANY=[@ANYBLOB="0200e800a89983f43d2c4c0100fa758d57edb5e55a5151ca39735dfae41650d541611dd5ba18092749058b8eb976854b8da8c52704f92b959a323ebf7dc3e745b8c8d73844ff3406e5a76fc4ced8c160a177f71355cf8c767a2625d2f95b2b9e24beb46d513a5013d1bb1039268cf9704c953a2ae2de6334020000002514ac82a984ed36baa79f7b1ddcabf5695a1c129ae714dc696f6557cb6affcae56cd93e2249cda541e85e3f6dcd6048630fdf6f641ccc1aec457b856f107b6ebcbc588770b3df3af3ce817ac19b0cf329e008ab34f8ece4673e43a85f5833c23535344a4650043a4e29263ff0b85555"]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000240)={{0x1, 0x0, @identifier="60612a8bea65ce185455f7e437459a9b"}}) r4 = socket$netlink(0x10, 0x3, 0x10) exit_group(0x17) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="030b00000000000000002d000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xf8, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x697d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6d}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4589799e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20a0ab32}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x92cb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x779c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40081}, 0x840) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:25:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="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", @ANYRES16, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=r2]], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16=r7, @ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYRES64=r6, @ANYRESOCT, @ANYRESOCT=r2]], 0x3}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 09:25:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) [ 1033.478738] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:08 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000001c0)) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000040)='\'\x00', 0x2, 0x2) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) r6 = accept(r0, &(0x7f0000000140)=@xdp, &(0x7f0000000080)=0x80) fchmod(r6, 0x46) [ 1033.877739] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653046d9b3ae27231112ba72ba7cb01aadd53c4b1a5640b639a8838c0d45aa3f6cdc1ae60b7ebdbe44274c9ec159d68fc70d0502a98bc4ce2fecaba0a0f815e4f4000000000000"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:09 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={r0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000140)='./file1\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1034.350330] overlayfs: failed to resolve './file0Fٳ'#r|0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) [ 1034.416899] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1034.419727] overlayfs: failed to resolve './file0Fٳ'#r|0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r7], &(0x7f0000000140)=0x1) sendmmsg$inet_sctp(r5, &(0x7f0000000700)=[{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000280)="463950024466276d7b24e56f478396f9712dc56448a8048349ad23d582288068e2e9d4a528390d8b2ffb89853098e60e72116c4c01e64e0dfeedc8af8291eaf1846ae6b5ce0b640f733bc6ad69846c77a54337a4912425407448199521b3d347ca6e296b169c0d2365", 0x69}], 0x1, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x6ba3, 0x8000, 0x9, 0x8, r7}}], 0x38, 0x4000000}, {&(0x7f0000000380)=@in={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="e15f2566f032322e5ea30079142fac79ae5850e66d4ddcc1cc8c69d8684bf45a27005f8edb963dd05c63bc4c8d29bb72adea728c57693b5d3144f0b8c197cc2936e09614791e3c28af6649a6d9902fe566582bfe9a1a178f34433bce2efa987a7cdcfd37c2fd2964d51e887c", 0x6c}, {&(0x7f0000000440)="e5f154cda73ceae45639072b154028015202480de0ccd8b10bbb0676b813d25b1725ad1b7572f20f9a81aa92f2eb38554820a5c6294a8ccd19eff55ad0599d92c43c6abbebb1b82a5fec1619d91ad0fd645903e0", 0x54}, {&(0x7f00000004c0)="ba227dd357ce6b399ab2758d07aee088c0db5f2bf1bd2e4de9b59ed86a10cb36067f505affb9b38a11a4807b253005c27dcd8dbd521f2fe5bbd0a0762013acdab376ebb5eb30e4e3bb675c696cf19560321febf54f48c73349d91a55d36b205dc8fb570924363f1f23114cebc5eccbfe05730c121b560b568ef186e995eb224ec8662c2a412fd9b6a473115433808ae0623c63343c63a512a1558a606b9ee6fa0a1573f06a15bd5744e59bfb51e699701f8b9c156ce0bb9887f1", 0xba}, {&(0x7f0000000580)="bc7f8def2e028ec8c8414d17194f5eba76f6916bfd440930bd5a77d5cf8f81b348e6c01e76a4ee70185c57efa2f89916d126bc178ee45fa8d2b8951ae784d444c1b300c40a5ec85735bbe44e654198f57151316091fe954f623626ae86737f14e7cc9379d6f9caea927295591978b6d7c6674cfb4891434e8b3eb78bc554b7ea6aea3e2b03ad15f53202ba1509122e8495ec63614c18753f4477da34c9fbd30f55cab6eb52da988fad9d5ab8404363cdd0e290d38e2ec80d0e946ce6450d8731d95b82a1b4457590cb4ce43713a479414b", 0xd1}], 0x4, &(0x7f00000006c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0x30}], 0x2, 0x4008000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) 09:25:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000140)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, [], 0xc}, 0x7}}, 0x8, 0x8}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1036.243491] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x2}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)) 09:25:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r4, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x240, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x164, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x904c}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc2, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb2, @ipv4={[], [], @local}, 0xf5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4080}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffeb26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x42a}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) 09:25:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) dup2(r0, r2) r3 = socket(0x10, 0x6, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="d3d5d9b0bea809da1713a2c1e5034067de32acf9bbc23ae43b1c37482d4e2b9fe4b01353f1fb72078fd4c8aaf00efeaeeba38be3450f56cbbeacb29688cd8e42ebd05e4e2a5d47a48d68779f52b6428090f31b1c7e6359b3287d86b499bce48ad40b179c8ad45385e2bcd7db82624680a91cab53708edf26a54747c18191fcb7230c68c7ba40df7749256cb7c9cd25523642c2dd4e70b6e61c1b5d", 0x9b, 0x7}], 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB="e1256c8416f627749a1844666d459a8e85eea13661c04ca5369e6f636b3d6c6f63616c2c6109006f6365686c2c64796e2c64796e2c636f56746578743d757365724e7509000000636b667364"]) 09:25:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d7463702c795590692090ab552d5f1f2910cf706f72743d3078303030303030303030303030346532322c66756e633d664f44554c455f434845434b2c666f776e65", @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62ee3f5f3d84facff075732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='9p\x00', 0x880, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',euid=', @ANYRESDEC=0xee01, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',obj_uselay.opaque\x00,\x00'/35]) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x2) [ 1036.523413] audit: type=1804 audit(1587201911.940:291): pid=7709 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1436/cgroup.controllers" dev="sda1" ino=15876 res=1 [ 1036.616497] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:12 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x2002) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1036.651076] audit: type=1804 audit(1587201911.980:292): pid=7705 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1436/cgroup.controllers" dev="sda1" ino=15876 res=1 09:25:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000040)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8001) [ 1036.747971] overlayfs: failed to resolve './b?_=us': -2 [ 1036.784237] 9pnet: Insufficient options for proto=fd [ 1036.821038] overlayfs: failed to resolve './b?_=us': -2 [ 1036.831144] 9pnet: Insufficient options for proto=fd 09:25:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1036.916448] audit: type=1804 audit(1587201912.340:293): pid=7733 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1437/cgroup.controllers" dev="sda1" ino=15827 res=1 [ 1037.011363] audit: type=1804 audit(1587201912.370:294): pid=7733 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1437/cgroup.controllers" dev="sda1" ino=15827 res=1 09:25:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) fcntl$setsig(r2, 0xa, 0x1d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x240442, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xadccb8, &(0x7f0000000080)={[{@max_batch_time={'max_batch_time'}}]}) getsockopt$sock_cred(r3, 0x1, 0x2c, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [{0x2, 0x4, r4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x4, r6}, {0x2, 0x5, r4}, {0x2, 0x3, r8}, {0x2, 0x0, r4}], {0x4, 0x2}, [{0x8, 0x5, r9}], {}, {0x20, 0x4}}, 0x7c, 0x3) [ 1037.117058] audit: type=1804 audit(1587201912.420:295): pid=7729 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1437/cgroup.controllers" dev="sda1" ino=15827 res=1 [ 1037.243314] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x4, 0x1000, [], &(0x7f0000000040)=0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syncfs(r0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) [ 1037.427048] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffeffeffffffff, 0xffffffffffffffff, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000440)={0x0, @bt={0x5, 0x2, 0x0, 0x2, 0x6060, 0x0, 0x7ff, 0x3, 0x7, 0x3f, 0x67, 0x6, 0x6, 0x7fffffff, 0x0, 0x3, {0x1, 0x4}, 0x6}}) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x82) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570706504000074c36c971cd97c3c30cc094f2808000000000000007bda73cd94227e008ac76470bbb1672b2ec7ff86246a75a3263ffed4752850cd6cabdd4e9b140b1711e7f119fdfca7be9713a35fc99f158f144cd5c8926ce7d54183507495ecbcb967b0cdff59dd04a1fc01525a547ccee98a121a43a56ea09724584fe6e089ef2f809d3e7eab5044192bc835d1fd5ed6fc3b5c3114f9d57c"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x0, 0x7, 0xfffffffffffffffd}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x7, 0x202, 0x1f, 0x7d9, 0xfffffffb, 0x201}, 0x0) [ 1037.583998] audit: type=1804 audit(1587201913.000:296): pid=7751 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1438/cgroup.controllers" dev="sda1" ino=15753 res=1 09:25:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000003c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_crypto(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=@get={0xe8, 0x13, 0x8, 0x70bd26, 0x25dfdbfd, {{'morus1280-generic\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x40) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000184}, 0x8004) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6c6f77159ac324c39c65726469723d2e2f6275732c776f726b64020000000000000065312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff, 0x800}, 0x0) [ 1037.650137] audit: type=1804 audit(1587201913.030:297): pid=7751 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1438/cgroup.controllers" dev="sda1" ino=15753 res=1 [ 1038.786470] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000000, [ 1038.826352] EXT4-fs (sda1): re-mounted. Opts: max_batch_time=0x0000000000000000, 09:25:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r2, 0x1, 0x2c, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044841}, 0x0) [ 1039.003777] overlayfs: unrecognized mount option "uppe" or missing value [ 1039.056831] overlayfs: unrecognized mount option "uppe" or missing value [ 1039.095530] overlayfs: unrecognized mount option "low$Üerdir=./bus" or missing value 09:25:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x120) socket$bt_hidp(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c926f727b8d5a8b96249371bb6c65312c75707065726469723d2f66696c6530d634e2"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0xfff, 0x60942) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x7, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1039.145449] overlayfs: unrecognized mount option "low$Üerdir=./bus" or missing value 09:25:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x2a) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r3 = getgid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005600040003000000000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="1000070000000000200000000000000d"], 0x3c, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x10, {0x20, 0x0, 0x8}, 0x1, r2, r3, 0x9, 0x3, 0x5, 0x7, 0xffff, 0x6833, 0x8000, 0x0, 0x0, 0x7, 0x7, 0x101, 0x0, 0x6, 0x401}}, 0xa0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) [ 1039.288262] overlayfs: unrecognized mount option "or{Z$qle1" or missing value [ 1039.354790] overlayfs: unrecognized mount option "or{Z$qle1" or missing value 09:25:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1039.537668] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, 0x0, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="248931f6260001000000000000e0a66bb4eaf04b67d6a3e1c560da23e4347e63c456a542757dd95074ef3bd83adf", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250800000005002f00160000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000044}, 0xc011) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6a6e1fa47eab630bc20cc462755d2c776f8c6b6469723d2e2f66696c65312c3570706572"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x8}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) [ 1039.856992] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1039.956351] overlayfs: unrecognized mount option "wokdir=./file1" or missing value 09:25:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x58, 0x9}, 0xc) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={'caif0\x00', {0x2, 0x4e23, @empty}}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1040.024919] overlayfs: unrecognized mount option "wokdir=./file1" or missing value 09:25:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000340)={{0x8, @broadcast, 0x4e24, 0x1, 'dh\x00', 0x0, 0x0, 0x7e}, {@multicast1, 0x4e21, 0x2000, 0x5, 0x3, 0x3}}, 0x44) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1040.355183] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1040.379426] overlayfs: unrecognized mount option "l" or missing value [ 1040.433527] overlayfs: unrecognized mount option "l" or missing value 09:25:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x57e5, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000340)=""/120, 0x78, 0x20, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x20) open(&(0x7f0000000440)='./bus\x00', 0x40200, 0x1bd) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=r=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$kcm(r2, &(0x7f0000001800)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x2, 0xe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)="e6738bef2d55c56f383b5a19ca6553cb94a3ef352152a6569a39cf8a7f3b3c", 0x1f}, {&(0x7f0000000140)="41a5be3c088c2c0e956cf55546f9282ef0ba3bc62ae9edd68b839d09bba7b1ba786a4498dd711e839586d4157243170a846e1ef200bb9bf1b4bc3249a5e5352fb1a60a58", 0x44}, {&(0x7f0000000200)="219e953345152e87e5fc98d220b181fda849144939a8e679184157ee9422782344e2a48e441021692b2e06414b455e2c306cabe7bd7d18677105f0f67f8789c2a25212c5f9f6fec3e02e77dac8776edabc74a4f128bc41fb5092dc1b4bb4804e", 0x60}, {&(0x7f0000001840)="f1f6f2bf591bb2df00f3948c26fc3e19bc9aee9f159ee321e164b3d2114f1e7d285180b63caba3be017f96db539d3710b2a02521d2371ff8db874f4f7546be975f1052767ead3b1b47621a25cf6d3ba2704d12f0638d6b41404e31492892cfb49598885a270bced29179e6b7f653e5675f", 0x71}, {&(0x7f00000002c0)="3fad7c45d3f1f63912764a45e903eb811429508618b873fc3a107d12941b6ed3620775745b3f62415f2958075c4b4c2ec7c6d0c9690566654e91b6fa9fb41c4abde5b861a9b66604b48b9a2a1dbf89dbb5bad7b6f3e5c87bb78c23bd948de6120a6ff765bdf322c9a6370ea68604e675a04b0e17b488bd087a317bd285", 0x7d}, {&(0x7f0000000340)="79dd664959871275b8cafc3671854ea48fbc23cfd3520f741dc33ac3d993a8d149f89db6f246437278b7cc4489b5edaf297d65332fd7679e3c504f4761f3aa0a87ffa366a694084a979e89894755d46910e53ad79e8c96a011f0f8179fccb370662fe1b632c1bc0149afb9fdf13cdda79ad0e625ff35677abb1614c5c6f803ac1e256961d0feac11d21e98fb13f839b2ab05d131178d76e73db863c02205491299a85836b6d1fb9d9b8fff6a0a1c3a053a2a09b789e75e37f05751c2d485fb1cd3cd443190de8196ba9b7683838bada2c50ad33b6b9da8a59938ec015c0401aac02f23f16eda21660077a83dc958aeb8f05fc6d0", 0xf4}], 0x6, &(0x7f00000004c0)=[{0xc0, 0x105, 0x800, "c99bc4a7a47c0621a9274a35a330d4f730aead52a618a8001d8817dbe9de5e46a30a0fa54bb95f69f9ffe11fd4e0de65920c393f6ba16972080bb39edb85b400023dea7f1859b4ba94df3e65c98d1c86787c19d71f541b0da87c47116f5ac5a16d214471cbcfc397026f6638139105c514fb47f044e645488c1da3bdda50e4e42f5fa71be092fc6d0359e87126f000caf7a5e020163c0025d947585765e218b0b8ee94a5dd5842a85a40aa8e"}, {0x18, 0x119, 0x401, "da32828b15c2"}, {0x48, 0x119, 0x5, "6c0e890549466ad63627829ddbb16c7b76a73609ec504150a72d61d7bb1be47dd505488616d411b63ba9e1d75c777e8a3d5938"}, {0x1010, 0x10f, 0x8, "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"}, {0x40, 0x6, 0xfff, "bc253d6b17125b96a6c1e3b11645fa48ea22f7b61e9473e7703a988d914b321f845b8dd2bdcc20d5a8ddf0ec84f0"}, {0x78, 0x10c, 0x1, "4bc87484306dd45960ec891b5999aaafb2b0330ac361716407b37c20f9dcb732673a3de6e59191ffdbb126e0f9a6d8e4b3c1899b58af73708cb79ce459ddde5c11709fc60b5418e5f0238a1e3c3d15ec6a23d4f9e2a9918c58541d2f3db83da6cded4db705a6"}, {0x38, 0x10c, 0x2, "9656da9307bcbb83dc66ccbc2fda1bc6cbf0367325c87d62ba280dad7fa97c01dfb2062976"}, {0xf8, 0x117, 0x9, "249d146daee962fcf3bbd1ea5674eb0d5eb7caef06a3e9ac8e59bb4693be56dadd1b8cef7ba352da6c4305d41428d5450a35afe3bc0ac3ba55fd266f1c8bccf8c163b823cca53fb2b095c1793a3865f8c3de10a739316c3bce9d0ef5f1d1556699b31e77b685a779c2535cef7f030650d2419c41d09d8b890ac7e78e628588114e65229d77597952b3bbc1f5947d99d00583e1999388dc2d78600a17686ca07f8d45def4a1d252470251d1bb3753fcc6cb6631a3b829d6de6460479035be9887def43bc7aca33a921498309c82e221f7e22a57922dfb1d660c5e2518ce514b491aeda4e8aa"}], 0x1318}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r3, r1, 0x0, 0x100000002) [ 1040.632023] kauditd_printk_skb: 2 callbacks suppressed [ 1040.632031] audit: type=1804 audit(1587201916.051:300): pid=7832 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1441/cgroup.controllers" dev="sda1" ino=15796 res=1 [ 1040.691059] overlayfs: missing 'workdir' 09:25:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r1 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/60, 0x3c}], 0x1, 0x8) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r1, &(0x7f0000000340)={0x7, 0x1b, 0x1}, 0x7) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1040.729946] overlayfs: missing 'workdir' [ 1040.731339] audit: type=1804 audit(1587201916.091:301): pid=7830 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1441/cgroup.controllers" dev="sda1" ino=15796 res=1 09:25:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d7463702c795590692090ab552d5f1f2910cf706f72743d3078303030303030303030303030346532322c66756e633d664f44554c455f434845434b2c666f776e65", @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62ee3f5f3d84facff075732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setuid(0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='9p\x00', 0x880, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',euid=', @ANYRESDEC=0xee01, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',obj_uselay.opaque\x00,\x00'/35]) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x2) [ 1041.051935] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="a9da6c6f7765726469723d2e2f6266732c776f726b6469cc723d2e2f66696c65312c75707065726469723d2e2f66696c"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0x0, 0x220400) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1041.236095] overlayfs: failed to resolve './b?_=us': -2 [ 1041.273734] 9pnet: Insufficient options for proto=fd 09:25:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, r4, 0x301, 0x70bd27, 0x101, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @private=0xa010100}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x48085}, 0x8800) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/wireless\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/86, 0x56) bind$vsock_dgram(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="b545000000000000050010"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 1041.425272] overlayfs: unrecognized mount option "lowerdir=./bfs" or missing value 09:25:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x0, "d5beb8"}, 0x6) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000340)='minix\x00', &(0x7f0000000380)='./file1\x00', 0x1, 0x6, &(0x7f0000000680)=[{&(0x7f00000003c0)="fbf5c89bed25b10671a08be1f105f7e649392afb6f750e9a", 0x18, 0x5}, {&(0x7f0000000440)="2bb115abe608e89a1925bd3bd417e81e9179264c8580a3ef0b6e81dfa29b88eca284e58afeb471eb3e5e9648c235508a35ae21418c4ed4a21fdbdb3d3e483de81c3bd3dc06", 0x45, 0x800}, {&(0x7f00000004c0)="04e212d79eb03c328c54e0543a61a8cc96b71c5c411d8ac9b119ee984cb046c0abcccffad3a0dd17ae8826ed62fa988ed4fff0451015c5118313a76e95f827031578dc43e3b8d33ae37d6ae80318c8c4388dc0f3944e8ddfb47ffac3819a21bcb4640c486209c003148262226b7ad095e537b4f4e9979f85f4c433fe46ba21427c0a9f8653a7357863c22b2e7574af174c82e1670951fc9511ea9e165815140cbd205f7812c4a33a747b5ebe6e53e63899ce0a92800aa505211fc50f641ccf63ff066e46f533174c3caebebe5fd2d70bfb9557147426dd332079c07d51b4a75732b8bb422b4c1754be1ee8b2d89e1b", 0xef, 0xffffffffffffff7e}, {&(0x7f00000005c0)="8a7012610ff8", 0x6, 0xd1}, {&(0x7f0000000600)="2fc7fd0bb39895c585ce2ebc031a4984390dc45c64", 0x15, 0x8}, {&(0x7f0000000640), 0x0, 0x4}], 0x101000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x0, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1041.520234] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1041.542106] audit: type=1804 audit(1587201916.961:302): pid=7859 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir573951450/syzkaller.nbROzE/1443/cgroup.controllers" dev="sda1" ino=15985 res=1 09:25:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000340)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r6, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r6, 0xc}}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="c0", 0x1}, {&(0x7f0000000200)="bccb34d0b5c9533843b47efdf6fdb1d4df0b91324a07857c7e7acb1cee8304dcc8139e809cae04fd01c3ee3d5804de89da138e70e2445d1adc5c5d350af0d04d477c7606923f580e4354ed08e804c9e79f9014f2149f30c367154c6279b0a339fa7fdc7786de1fe30ac111670f546156edf8ffaf56f24d73a7b272b60bdc2317a13d5e49ea977f6a5b3557633598ca7f796313d69282d11e7d565949fdf82a2d553414060fd684380588ddf6651b96318587fc457a5f3a7a7f9e1272d3997b", 0xbf}, {&(0x7f0000000140)="06c867e0d659231b225ad33f6bb0cb15344d409c0f43a0e92f5f4872f8e14fff3853d990835946fb5c308140fd0ebdaa241268f19b01edc8fdc71dacf3d24dcda52e6ce3d9b5f25240e2eeea550197deff525b5abfc241649e290680cd245d7b019e3b645712d84465c359803a16384dd1380174e24bca83afe8344451b59621", 0x80}, {&(0x7f00000002c0)="59c24e704f7bbc0bedd1aa", 0xb}, {&(0x7f0000000300)="5617362be3574ab6a7a78b18417c697bab2d72b53cb8e11bf7001e", 0x1b}, {&(0x7f0000000340)="0b2cd0c59efc7b92fb8e17aa78febe983c70f306eec033fd5f035684cba26ad1e59f6dd5f77756705fedfeaf0413e438a15da584bed59fc84bb4a894426775c1a46d359d932734da6c", 0x49}, {&(0x7f00000003c0)="d939f646c920998d72d970ac6d807611ff448a23d37053dfbcaa377af3534a1b8385cae85b1043304d0af820c8c6f7dec7514055bff03dff6efed76658837ecedfb98b73bfbac038b627f74da0db3b65", 0x50}, {&(0x7f0000000440)="3aacfd00f8e615ec2507112c5c7a0247dea824ed1cc761cbe4e82c078754cb045460d087fba22a4ae3c7def1d4fa778da6990667862da1850a780b979ce81d7f", 0x40}, {&(0x7f0000000480)="82428d98a385b2503c01ffac8d76a7dbd1206b6e6e97d648ada55860f74d0e9cc5b2b2ef34b784fe097a05fbe7a7e78cc97ec99cfd3e8038e61b8901d9d227ad533863099c905a940d465419eae647eb31ad2d06baaa5e67d50278ecb3744d937145b4823db515ad2d59387c62f49d1cf413bd7631f6ebd30a6bb23027ef4679778bdbe581231e248c523516e5c8811d5bea5f27056dd25789e2e602fe2dfc32a3c5016b884e7912c4f009f4a7746ac6001384a70460444ee99965113f12700535207230a695", 0xc6}], 0x9, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x51) sendfile(r2, r1, 0x0, 0x100000002) [ 1041.895600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r6, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r6, 0xc}}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="c0", 0x1}, {&(0x7f0000000200)="bccb34d0b5c9533843b47efdf6fdb1d4df0b91324a07857c7e7acb1cee8304dcc8139e809cae04fd01c3ee3d5804de89da138e70e2445d1adc5c5d350af0d04d477c7606923f580e4354ed08e804c9e79f9014f2149f30c367154c6279b0a339fa7fdc7786de1fe30ac111670f546156edf8ffaf56f24d73a7b272b60bdc2317a13d5e49ea977f6a5b3557633598ca7f796313d69282d11e7d565949fdf82a2d553414060fd684380588ddf6651b96318587fc457a5f3a7a7f9e1272d3997b", 0xbf}, {&(0x7f0000000140)="06c867e0d659231b225ad33f6bb0cb15344d409c0f43a0e92f5f4872f8e14fff3853d990835946fb5c308140fd0ebdaa241268f19b01edc8fdc71dacf3d24dcda52e6ce3d9b5f25240e2eeea550197deff525b5abfc241649e290680cd245d7b019e3b645712d84465c359803a16384dd1380174e24bca83afe8344451b59621", 0x80}, {&(0x7f00000002c0)="59c24e704f7bbc0bedd1aa", 0xb}, {&(0x7f0000000300)="5617362be3574ab6a7a78b18417c697bab2d72b53cb8e11bf7001e", 0x1b}, {&(0x7f0000000340)="0b2cd0c59efc7b92fb8e17aa78febe983c70f306eec033fd5f035684cba26ad1e59f6dd5f77756705fedfeaf0413e438a15da584bed59fc84bb4a894426775c1a46d359d932734da6c", 0x49}, {&(0x7f00000003c0)="d939f646c920998d72d970ac6d807611ff448a23d37053dfbcaa377af3534a1b8385cae85b1043304d0af820c8c6f7dec7514055bff03dff6efed76658837ecedfb98b73bfbac038b627f74da0db3b65", 0x50}, {&(0x7f0000000440)="3aacfd00f8e615ec2507112c5c7a0247dea824ed1cc761cbe4e82c078754cb045460d087fba22a4ae3c7def1d4fa778da6990667862da1850a780b979ce81d7f", 0x40}, {&(0x7f0000000480)="82428d98a385b2503c01ffac8d76a7dbd1206b6e6e97d648ada55860f74d0e9cc5b2b2ef34b784fe097a05fbe7a7e78cc97ec99cfd3e8038e61b8901d9d227ad533863099c905a940d465419eae647eb31ad2d06baaa5e67d50278ecb3744d937145b4823db515ad2d59387c62f49d1cf413bd7631f6ebd30a6bb23027ef4679778bdbe581231e248c523516e5c8811d5bea5f27056dd25789e2e602fe2dfc32a3c5016b884e7912c4f009f4a7746ac6001384a70460444ee99965113f12700535207230a695", 0xc6}], 0x9, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x51) sendfile(r2, r1, 0x0, 0x100000002) 09:25:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) connect$netrom(r0, &(0x7f0000000340)={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1042.090392] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1042.140263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r6, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r6, 0xc}}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="c0", 0x1}, {&(0x7f0000000200)="bccb34d0b5c9533843b47efdf6fdb1d4df0b91324a07857c7e7acb1cee8304dcc8139e809cae04fd01c3ee3d5804de89da138e70e2445d1adc5c5d350af0d04d477c7606923f580e4354ed08e804c9e79f9014f2149f30c367154c6279b0a339fa7fdc7786de1fe30ac111670f546156edf8ffaf56f24d73a7b272b60bdc2317a13d5e49ea977f6a5b3557633598ca7f796313d69282d11e7d565949fdf82a2d553414060fd684380588ddf6651b96318587fc457a5f3a7a7f9e1272d3997b", 0xbf}, {&(0x7f0000000140)="06c867e0d659231b225ad33f6bb0cb15344d409c0f43a0e92f5f4872f8e14fff3853d990835946fb5c308140fd0ebdaa241268f19b01edc8fdc71dacf3d24dcda52e6ce3d9b5f25240e2eeea550197deff525b5abfc241649e290680cd245d7b019e3b645712d84465c359803a16384dd1380174e24bca83afe8344451b59621", 0x80}, {&(0x7f00000002c0)="59c24e704f7bbc0bedd1aa", 0xb}, {&(0x7f0000000300)="5617362be3574ab6a7a78b18417c697bab2d72b53cb8e11bf7001e", 0x1b}, {&(0x7f0000000340)="0b2cd0c59efc7b92fb8e17aa78febe983c70f306eec033fd5f035684cba26ad1e59f6dd5f77756705fedfeaf0413e438a15da584bed59fc84bb4a894426775c1a46d359d932734da6c", 0x49}, {&(0x7f00000003c0)="d939f646c920998d72d970ac6d807611ff448a23d37053dfbcaa377af3534a1b8385cae85b1043304d0af820c8c6f7dec7514055bff03dff6efed76658837ecedfb98b73bfbac038b627f74da0db3b65", 0x50}, {&(0x7f0000000440)="3aacfd00f8e615ec2507112c5c7a0247dea824ed1cc761cbe4e82c078754cb045460d087fba22a4ae3c7def1d4fa778da6990667862da1850a780b979ce81d7f", 0x40}, {&(0x7f0000000480)="82428d98a385b2503c01ffac8d76a7dbd1206b6e6e97d648ada55860f74d0e9cc5b2b2ef34b784fe097a05fbe7a7e78cc97ec99cfd3e8038e61b8901d9d227ad533863099c905a940d465419eae647eb31ad2d06baaa5e67d50278ecb3744d937145b4823db515ad2d59387c62f49d1cf413bd7631f6ebd30a6bb23027ef4679778bdbe581231e248c523516e5c8811d5bea5f27056dd25789e2e602fe2dfc32a3c5016b884e7912c4f009f4a7746ac6001384a70460444ee99965113f12700535207230a695", 0xc6}], 0x9, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x51) sendfile(r2, r1, 0x0, 0x100000002) 09:25:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, [], 0x3, 0x8}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1042.298687] overlayfs: unrecognized mount option "$g#8VD!˯Zb\!\:ΡJ.g>$" or missing value [ 1042.351677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:25:17 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r7, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)="c0", 0x1}, {&(0x7f0000000200)="bccb34d0b5c9533843b47efdf6fdb1d4df0b91324a07857c7e7acb1cee8304dcc8139e809cae04fd01c3ee3d5804de89da138e70e2445d1adc5c5d350af0d04d477c7606923f580e4354ed08e804c9e79f9014f2149f30c367154c6279b0a339fa7fdc7786de1fe30ac111670f546156edf8ffaf56f24d73a7b272b60bdc2317a13d5e49ea977f6a5b3557633598ca7f796313d69282d11e7d565949fdf82a2d553414060fd684380588ddf6651b96318587fc457a5f3a7a7f9e1272d3997b", 0xbf}, {&(0x7f0000000140)="06c867e0d659231b225ad33f6bb0cb15344d409c0f43a0e92f5f4872f8e14fff3853d990835946fb5c308140fd0ebdaa241268f19b01edc8fdc71dacf3d24dcda52e6ce3d9b5f25240e2eeea550197deff525b5abfc241649e290680cd245d7b019e3b645712d84465c359803a16384dd1380174e24bca83afe8344451b59621", 0x80}, {&(0x7f00000002c0)="59c24e704f7bbc0bedd1aa", 0xb}, {&(0x7f0000000300)="5617362be3574ab6a7a78b18417c697bab2d72b53cb8e11bf7001e", 0x1b}, {&(0x7f0000000340)="0b2cd0c59efc7b92fb8e17aa78febe983c70f306eec033fd5f035684cba26ad1e59f6dd5f77756705fedfeaf0413e438a15da584bed59fc84bb4a894426775c1a46d359d932734da6c", 0x49}, {&(0x7f00000003c0)="d939f646c920998d72d970ac6d807611ff448a23d37053dfbcaa377af3534a1b8385cae85b1043304d0af820c8c6f7dec7514055bff03dff6efed76658837ecedfb98b73bfbac038b627f74da0db3b65", 0x50}, {&(0x7f0000000440)="3aacfd00f8e615ec2507112c5c7a0247dea824ed1cc761cbe4e82c078754cb045460d087fba22a4ae3c7def1d4fa778da6990667862da1850a780b979ce81d7f", 0x40}, {&(0x7f0000000480)="82428d98a385b2503c01ffac8d76a7dbd1206b6e6e97d648ada55860f74d0e9cc5b2b2ef34b784fe097a05fbe7a7e78cc97ec99cfd3e8038e61b8901d9d227ad533863099c905a940d465419eae647eb31ad2d06baaa5e67d50278ecb3744d937145b4823db515ad2d59387c62f49d1cf413bd7631f6ebd30a6bb23027ef4679778bdbe581231e248c523516e5c8811d5bea5f27056dd25789e2e602fe2dfc32a3c5016b884e7912c4f009f4a7746ac6001384a70460444ee99965113f12700535207230a695", 0xc6}], 0x9, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x51) 09:25:17 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x4, 0x3, 0x1, 0x81}, 0x14) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) [ 1042.576791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1042.617023] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r6, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="a64e2f6e1a29"}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x84) 09:25:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100200001300820028bd7000ffdbdf252c031f034e204e2200010000ff0000000000000000000000a40000000008000001000000390b0000", @ANYRES32=0x0, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x40) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1042.791317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:25:18 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x466e00, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44", @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="2c0ab650656184125d1e3a592d9a122ac4eeb42665fb67a97201ae600406ac37fc0fcf8ad960dcc4ad7625866cc55f19f1714e54d32426d0b24368d2a0ef45592b2f286b475dc92f7292a682c67bb1921b97f5798bfa83b6d12c90dfe1bc12f5115933665442eafadcc072", @ANYRESHEX=r2, @ANYBLOB="5a65ed51cfa780012ad80aba75353ae4aafc556744b39a6a59bd2ab05ccaccfc2df677483116f14f33af4016b835091565b9032f65be0bedce11193e610837de4d6ff33322d363b33ffaf302747a5ea6d8e49c4d15b2a41b350b3b9a80fb717246c26e10d8fc46146db8e851303bd273eacccc64e8b17b56ad666844a477f8d4361c3b1c9da8db6c5574baa61d82ce3945b638b145d6d21a49a195461728", @ANYRESDEC=0x0, @ANYRESHEX, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="2f53aae326a3d0c260ff67c42c5bbadcc861b8e035ac5640319f17fdffcac256cbb8aaa7e061720062447f0d6701ce431304ff323d28c3f7f5333f621d1ab81b31cc04d430a0c1edc5765b885303345d9e69edf9df055bc0eed6bca6495df6a3eda91f94ccef11d05e9171edbbbcc99bb8a2270ba3019f5b6ea41a66e3a08cc62f9c8f2839d184cd4c003bb5a12317a7dfb85ffa38ed527558412273a033fa26a02e7e2d8db18e4742d82bb4394515fdcd6fd94ad7affde178064a95458f7c1ab5c400594c3bfcc60ac9f56f0596da2322231cff3d2794866e6f5b5d3be0"], @ANYRESOCT, @ANYRES16=r5, @ANYRESOCT=0x0, @ANYRES32=r2]], 0x6}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r6, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x3}]}, 0x30}}, 0x0) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') [ 1042.964607] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:25:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) accept$alg(r3, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fddbdf25020000000c00040001010000000000001400078008000100", @ANYRES32=r2, @ANYBLOB="08000180", @ANYRES32=r3, @ANYBLOB="0c000400070000000000000008000100000000000c0006000200000000000000"], 0x54}}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000640)={{0x1, 0x9}, 'port1\x00', 0x40, 0x20840, 0x6, 0x2, 0x81, 0x5ac, 0x7, 0x0, 0x8, 0x7}) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000600)={0x0, 0x0, 0x1f, 0x1b, 0x7d, &(0x7f0000000200)="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"}) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1043.148000] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={r1, 0x0, r0}) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xdebe02, 0x0) 09:25:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,fort=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./bus/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'netdevsim0\x00', {0x3}, 0x4}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000006c0)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) 09:25:18 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000340)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001205090001007665746800000000180002001400050000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240300000000000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000002ca5f96200270d000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000e0000000a00010072737670360000000c00020004000600040006000600050040050000"], 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98d7459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0xc, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_ACT={0x4}]}}]}, 0x3c}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x1400}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000480)="82601af125f20ad14d8ddca9d13f017bfe23e2ee0194b19d07be7ceaa86cd53e51cd7bbb5e2372854a8de8536597f80cdc013e53dca878ebba3ac8e6db8cf6bc175b144d18da080ad0dbca47513c85aa4198f1cc09639560bd867080e8adc462ffe34bae31bcd7ad9e59cbc04326846244fd662ae648594aecf6b4980eae6781868aa2d1cbb016b08e52a996866a913d5284f179749ba1b6196b8a84f1bb45db49383958bea284ed674f", 0xaa}, {&(0x7f0000000540)="8022305e834e91bf4cc6a0397d9d7e46d1b1ff82841cce2317a78fc3443ad7174424491f1f2ae3d9257c47acbd40c602cda5c968cc930d48a18d6e810899ea7a96fff9e5fdbe3f244689669f0e3a16e44035b82d85a3448911c3bdc2774da18b4e4a95eb4dce41d255d4708eb1cf692e54b1ad2fc05e20a6547e587c494c53958ebf61441b0d04145ea345bbfc69e6cdd727f72cf19f072e19da51dfd5602b034a98d55d0fc208115741583e74ccf4b5dc81e261522f03e5649c946e145ceacacf31e389da732ecd438cfcb945b17c208b21c737c2bc385df7", 0xd9}, {&(0x7f0000000640)="0dabacfc52c7108a581eb8863196a53ef86692df1370ea75ee3608dcc9911baac56ca1cd31f69db42b41e50b064ccccdb308e47ed4baa67cdf42f4ef1c279e0a63f825c5e6ea7d611e6d1ca3bef18ab753520cf00f73ffa795c6abd210", 0x5d}, {&(0x7f00000006c0)="4be2d34df8156abc3dc15a999f6ae6a295133115b839810d222a59dd679e981bebc26e058379970c98136d0592ece958786e07d13969c90c6f3c0edfcdca61bd49064de363242de0a0f1ea5f20ed1a87ffefdf1f59a36ef50a44109aeaf8baf4b55227e81acaf3552f8c1b065216daa8eaab863e1af51a357701e8fa1c298fe51b1e9d34b7587f06434031979702a353ebff0457a00e83b00496d2513fc9d789a19817131998fec8761598e0d5e293b526f38738f20edf6c9fa637928e3b67810940b8ce65beb28366ba406b72294fa21a45554f9193f68100da72a2e2b4eb2699744b0a0236ffa3e309293d4866", 0xee}, {&(0x7f00000007c0)="fc06d32c68710804ef38cdba6e80dc60ead977824dc683990f3a4673c6f54c78cfd38e93d45ea2f59580fd1d8dd13575d5edb138e997055bb3e9a6a407d715b86a0940b782fc1b29663785ac21af2e9350854bf68289e8365316335c15761efd10091b892d8cf973ae3a8bec8f6e2321ea69761e52886bb3496856245198c82fcb36671dd2f779f974152cc910d952f58b36d488afe16804b9d33ece8cb840b5844cf2e564873f6564e68615ef7eeda03e94921602529ebd09ab30f48584", 0xbe}, {&(0x7f0000000880)="66ee3a11c4f0677d44b1ba27c2681651f7d2d0c76cef2ea7b78ed4e679db4dfdf5954f481f04b369a0a508069864fe05102580741cd1f52ea8b62edf6d30d71695d62cc96ec1601b662116c4c421406af8599b3df2ca27bc766a645fad7843f2caece86dc2b4baa1ec03d88e71bab9199d048530898ae4dba08749ea5b853e5a53c16cde65764850", 0x88}, {&(0x7f0000000940)="42113a0dde2fef2a34e41a89460af57737d80380a04095bff52a1faee125260f3d04c200d05d0130f3eac9bbce47daf5d3310436520022afa060ab950d26cff4bd6c848a9dd1b9e0b5df908c677aa818b36952c0fc5d6f3e51bc50a41299a108304901470268b016134527314fc4077330777edd7f5eed3684f75ce2cda49629af7939251a7080b92e67f47c838397c895cfac149d8f11c7ebfce3f016a1d4b763cc95f9ea31acedce4f6344e40137a7ab5a8363025cb13304242168c87fe87f06690fc9ee29ae6e2a91e4d7f9", 0xcd}, {&(0x7f0000000a40)="a97aeb15", 0x4}], 0x8, &(0x7f0000000b00)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x19}, r6}}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x0, 0x21, [], [@generic={0x7, 0xe5, "be24c1178a01abda1a70be12d0fb9603e713cfcebc17a67f3a7acaebf6706ec655020b81cae663fd541463f8a9fc5e81f15b69238e1c254bf16857283263565f8be370f37323a68270d7b721d12daaa6931028fff32605bfc497d4b6d2ec5b3fc9025f29bc18f208d07a357f7b6b36bec2598afb33260246ada10a08dd4a19e24e4961fb35f298516ac4560320ec2890125331545f6de9f52b4f9acb69f4a0f3529863bf4e6bf1a5dfaa48261e3d93c66ec82b72ac3cc84770c6efdaec6f69308613b1cf2ea413853b9f5df0cabfb946503557aa09a42fe3edfe4ff5cf7c9abe3dd77a50d2"}, @calipso={0x7, 0x10, {0x1, 0x2, 0xc0, 0x1, [0x9e]}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x22}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x180}, 0x40) sendto$packet(r2, &(0x7f0000000100)="9bda7f97a5ee045eebecdfad088b2ee4fb89f1240e689e7e8b54ef5911614ae982da1c53751e77fa58a6f7d38e647094be401965d62782b16e0882c277e20b30c223e4bf467cb5331c87ef47432feebf9beb32f75324e7f70dad35f1b79bc2fa2fe08a20303290aa73945a858b94feff530cb8c75b11acc17dd5a460190e0482583aeb830fcb5c222ae8140982acd2db49d2332a9c70c2a0fd5aa80297478c97fd1ff4e57c1af0004d5b73f2f4e34da716851e7fac532340cd027a9da7c94818aeb5ca9af3536a047998da5c1e8a36516f3b836f092ebc04263ecf2786e95102d9d5b17db746d02a3c4a2c66f7", 0xed, 0x40, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r4, 0x0, 0x2, 0x400000}}, 0x20) [ 1043.563588] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x80800, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x232) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c66776572646907009990d919a29a776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f0000000380)='./file0/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x400000}}, 0x20) [ 1043.743230] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x400000}}, 0x20) [ 1043.858740] overlayfs: unrecognized mount option "lfwerdi" or missing value 09:25:19 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r4, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa4ee09a6de19e59e}, 0x4000) getsockname(r0, 0x0, &(0x7f00000000c0)) [ 1043.947558] overlayfs: unrecognized mount option "lfwerdi" or missing value 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x400000}}, 0x20) 09:25:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x20, 0x500) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x2, 0x3a, 0x3ff, 0x1ff, 0x1f, 0x799, 0xffffffff, 0xffffffff}, 0x0) 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:19 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x4, 0x3, {0xa, 0x4e24, 0x6, @empty, 0x1002}}}, 0x3a) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:19 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2, 0x4}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b5450000f3ff0000050010"], 0x3}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100041c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2f}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x80000000}, 0x8) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x20, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind(r1, &(0x7f0000002ac0)=@hci={0x1f, 0x2}, 0x80) [ 1044.384709] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') renameat(r1, &(0x7f0000000380)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00') ioctl$TCSETS(r0, 0x5402, &(0x7f0000000340)={0x8001, 0x3f, 0x7, 0x1, 0x3, "1937a6c7b14f9470e588877af196655f536411"}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:19 executing program 0: r0 = semget(0x0, 0x3, 0x2) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000000100)=""/4096) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = semget$private(0x0, 0x1, 0x42) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000001100)=""/236) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x40000000, 0xa}}, 0x2e) getsockname(r1, 0x0, &(0x7f00000000c0)) [ 1044.520381] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) flock(r0, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x800}}, 0x2e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) 09:25:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @empty}, 0x1, 0x1, 0x0, 0x1}}, 0xfdb7) getsockname(r0, 0x0, &(0x7f00000000c0)) [ 1044.935181] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xf) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) 09:25:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0xad1, 0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB, @ANYRES64=r0, @ANYBLOB=',euid>', @ANYRESOCT=r1, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6fc665726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) [ 1045.048393] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="4828c4808bd3c4e2a478a12fd2152abc3ff0b33789ed9be0204626154b5665b1e2b1d9adfee8e0851b17b2f386f160081c6caf6ba10de40aa7740cd282af7efbfa2bf42993c3b273ee92a211b0f62cb446832965bd0a09970f43dd293ab0a4e927f22c82d4774830ef933a20aef458dbc38a12f5c73fef77a6a66e18ae77e9427a52eee3641905ec1b44ad93d4f78ccbd3183ef3b08058acfe7b3e9b871d1b246f2180f3d74caaac353a", 0xaa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) 09:25:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',eu', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3fe, 0x1ff, 0x1f, 0x7d9, 0x9, 0xffffffff, 0x3}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0xffff7fff, 0x9, 0x4, 0x40, 0x81, {0x0, 0x2710}, {0x5, 0xc, 0x7, 0x1, 0x34, 0x1, "438ce073"}, 0x80000001, 0x4, @planes=&(0x7f0000000140)={0x5, 0x10000, @mem_offset=0x2, 0x7f}, 0xb0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000004c0)={{0x1, 0x81}, 'port1\x00', 0x86, 0x180000, 0x0, 0xc4, 0x7b, 0x10000, 0x3f, 0x0, 0x2, 0xe4}) [ 1045.164818] overlayfs: unrecognized mount option "loerdir=./bus" or missing value 09:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xf) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) [ 1045.231111] overlayfs: unrecognized mount option "loerdir=./bus" or missing value 09:25:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./file2\x00', &(0x7f0000000440)='9p\x00', 0xc, &(0x7f0000002880)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000200)='./bus/file0\x00', 0x1) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000002840)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) syz_mount_image$ntfs(&(0x7f0000000340)='ntfs\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x6, &(0x7f0000002740)=[{&(0x7f00000004c0)="42b448b0a258ffc5287e5dfc5759acc49f0bbdd99b2910bab1594c89afb14b207a5d2c12e78be6a5ce7ef1f6ee95ca672c70a35bfd040bada939d8838b05ebc1755d518bcad0aeeebd63fc47bd3131bfef616374c35980637917a9332d4869445c52efbffb4ab72b0d51d78c41f483083337cf216ff0fc3e4332ad6d67caf0b5eaaba05cb776195dc315f42c4b9cce67796cabf9d7284690dcdef6a7bc14b08647dfd9c791f885d2bc6e37ab267a15e1b693abd5dcc449180a0926630cdfa198cd6cd37a315035d56b21183cc856bce8ae79d945f81f6e27de8e208aa4ef27a0f1c7710324a7bf6eb99f8e97c9", 0xed, 0x10001}, {&(0x7f00000005c0)="df53c5005b2f9a73112a45bc7c1ebb43a07500dcaebfc040b390ca24153b9e529015efb9369718664d31cd604b499847449b3ab203f7a81687bcda4e11bb271f12f6d94a3f112213eba7620154a279fcf8a9f4e0268671bd22f7e2a13af4285f1b0fc1d6f096141d543b62d3fc0135db87111811277e40243f60138df6d168cc850b8b145c96fb699d058895aea6ebcc98ebc43495da43b07c0a74e4541b53911ab585e7a756ef2ef308cdb24301949f07f2e686aed25c190e709a188ff989c47d14511868b027c3f56cb5ebcfd53fb69c", 0xd1, 0x6e4}, {&(0x7f00000006c0)="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", 0x1000, 0x4}, {&(0x7f00000016c0)="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", 0x1000, 0x967e}, {&(0x7f00000026c0)="d29a0c1a5ca1835a4ebbd919b65dd4c9d1dc23e7a5e1b4e9abdbbafbd015e7e1cd9cf3de1e7ef44f09b6a7d013cd57689a00f426fae7f09df73f863040415508b2199c8467a0c38dfaf4e2f37861f865033276becffe9194a8c0e5b65d3b513ec9dc08b2ef96274d56b58ea2f658f5513ce1e68adef335", 0x77, 0x2}, {&(0x7f00000003c0)="f0", 0x1, 0xfec}], 0x1010, &(0x7f0000002900)=ANY=[@ANYBLOB="73686f775f7379735f66696c65733d6e6e2c7375626a5f726f6c653d272c61756469742c7063723d30303030303030303030303030303030303034392c00408b1e8024f864cc7d3623f3bc6056e9c48bf35a5b55ab1d8d51c1684efbafd78a8058ed8e"]) 09:25:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/175, &(0x7f0000000100)=0xaf) 09:25:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xf) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) 09:25:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000100)={{0x1, 0x0, @reserved="a38777ba4211a1bc6d7ae449ce5b1a45e63223ac853a0ce814caf3fcdbce4e14"}}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'erspan0\x00', 0x1}) 09:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) [ 1045.580995] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) [ 1045.744761] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:25:21 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0xa30000, 0x5d, 0x3f, r0, 0x0, &(0x7f00000001c0)={0x9f0957, 0x0, [], @p_u32=&(0x7f0000000040)=0x3}}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140)=0x40, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) getsockname(r0, 0x0, &(0x7f00000000c0)) 09:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r2, 0x0, 0x2, 0x400000}}, 0x20) 09:25:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,func=MODULE_CHECK,fowner=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x100) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0xc79, 0x0, 0x7ff, 0x8}) rmdir(&(0x7f00000000c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) read$fb(0xffffffffffffffff, &(0x7f00000004c0)=""/211, 0xd3) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x10000030, 0x3ff, 0x1ff, 0x1f, 0x7d9, 0xffffffff, 0xffffffff}, 0x0) 09:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) [ 1045.996257] ================================================================== [ 1046.003968] BUG: KASAN: use-after-free in l2tp_session_queue_purge+0xea/0xf0 [ 1046.011166] Read of size 4 at addr ffff8880977542c0 by task syz-executor.0/8122 [ 1046.018613] [ 1046.020252] CPU: 1 PID: 8122 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 1046.028068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.037433] Call Trace: [ 1046.040035] dump_stack+0x13e/0x194 [ 1046.043673] ? l2tp_session_queue_purge+0xea/0xf0 [ 1046.048525] print_address_description.cold+0x7c/0x1e2 [ 1046.053813] ? l2tp_session_queue_purge+0xea/0xf0 [ 1046.058667] kasan_report.cold+0xa9/0x2ae [ 1046.062827] l2tp_session_queue_purge+0xea/0xf0 [ 1046.067511] l2tp_tunnel_closeall+0x1fe/0x370 [ 1046.072016] ? l2tp_tunnel_find+0x490/0x490 [ 1046.076348] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1046.081483] l2tp_udp_encap_destroy+0x8d/0xf0 [ 1046.086102] udpv6_destroy_sock+0xa6/0xd0 [ 1046.090261] sk_common_release+0x64/0x2f0 [ 1046.094416] inet_release+0xdf/0x1b0 [ 1046.098139] inet6_release+0x4c/0x70 [ 1046.101862] __sock_release+0xcd/0x2b0 [ 1046.105761] ? __sock_release+0x2b0/0x2b0 [ 1046.109911] sock_close+0x15/0x20 [ 1046.113473] __fput+0x25f/0x790 [ 1046.116765] task_work_run+0x113/0x190 [ 1046.120664] exit_to_usermode_loop+0x1d6/0x220 [ 1046.125260] do_syscall_64+0x4a3/0x640 [ 1046.129182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.134371] RIP: 0033:0x416421 [ 1046.137561] RSP: 002b:00007ffc27296760 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1046.145285] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416421 [ 1046.152562] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000004 [ 1046.159838] RBP: 0000000000000000 R08: 01ffffffffffffff R09: 01ffffffffffffff [ 1046.167220] R10: 00007ffc27296840 R11: 0000000000000293 R12: 000000000076bfa0 [ 1046.174495] R13: 0000000000770908 R14: 00000000000ff640 R15: 000000000076bfac [ 1046.181787] [ 1046.183422] Allocated by task 8124: [ 1046.187073] save_stack+0x32/0xa0 [ 1046.190535] kasan_kmalloc+0xbf/0xe0 [ 1046.194252] __kmalloc+0x15b/0x7c0 [ 1046.197811] l2tp_session_create+0x35/0x16f0 [ 1046.202225] pppol2tp_connect+0x1154/0x17b0 [ 1046.206550] SYSC_connect+0x1c6/0x250 [ 1046.210358] do_syscall_64+0x1d5/0x640 [ 1046.214247] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.219432] [ 1046.221055] Freed by task 8124: [ 1046.224337] save_stack+0x32/0xa0 [ 1046.227790] kasan_slab_free+0x75/0xc0 [ 1046.231676] kfree+0xcb/0x260 [ 1046.234779] pppol2tp_session_destruct+0xcd/0x110 [ 1046.239627] __sk_destruct+0x49/0x640 [ 1046.243430] sk_destruct+0x97/0xc0 [ 1046.246991] __sk_free+0x4c/0x220 [ 1046.250441] sk_free+0x2b/0x40 [ 1046.253627] pppol2tp_release+0x247/0x2f0 [ 1046.257774] __sock_release+0xcd/0x2b0 [ 1046.261662] sock_close+0x15/0x20 [ 1046.265109] __fput+0x25f/0x790 [ 1046.268383] task_work_run+0x113/0x190 [ 1046.272269] exit_to_usermode_loop+0x1d6/0x220 [ 1046.276856] do_syscall_64+0x4a3/0x640 [ 1046.280750] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.285931] [ 1046.287554] The buggy address belongs to the object at ffff8880977542c0 [ 1046.287554] which belongs to the cache kmalloc-512 of size 512 [ 1046.300241] The buggy address is located 0 bytes inside of [ 1046.300241] 512-byte region [ffff8880977542c0, ffff8880977544c0) [ 1046.311945] The buggy address belongs to the page: [ 1046.316886] page:ffffea00025dd500 count:1 mapcount:0 mapping:ffff888097754040 index:0xffff888097754040 [ 1046.326362] flags: 0xfffe0000000100(slab) [ 1046.330518] raw: 00fffe0000000100 ffff888097754040 ffff888097754040 0000000100000005 [ 1046.338407] raw: ffffea00025182a0 ffffea00026fe120 ffff88812fe56940 0000000000000000 [ 1046.346290] page dumped because: kasan: bad access detected [ 1046.351998] [ 1046.353625] Memory state around the buggy address: [ 1046.358564] ffff888097754180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.365930] ffff888097754200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1046.373295] >ffff888097754280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1046.380665] ^ [ 1046.386126] ffff888097754300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.393493] ffff888097754380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1046.400855] ================================================================== [ 1046.408214] Disabling lock debugging due to kernel taint 09:25:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r3, 0x0, 0x2, 0x400000}}, 0x20) [ 1046.464640] Kernel panic - not syncing: panic_on_warn set ... [ 1046.464640] [ 1046.472046] CPU: 1 PID: 8122 Comm: syz-executor.0 Tainted: G B 4.14.176-syzkaller #0 [ 1046.481061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.490434] Call Trace: [ 1046.493030] dump_stack+0x13e/0x194 [ 1046.496668] panic+0x1f9/0x42d [ 1046.499862] ? add_taint.cold+0x16/0x16 [ 1046.503843] ? preempt_schedule_common+0x4a/0xc0 [ 1046.508602] ? l2tp_session_queue_purge+0xea/0xf0 [ 1046.513445] ? ___preempt_schedule+0x16/0x18 [ 1046.517859] ? l2tp_session_queue_purge+0xea/0xf0 [ 1046.522705] kasan_end_report+0x43/0x49 [ 1046.526685] kasan_report.cold+0x12f/0x2ae [ 1046.530925] l2tp_session_queue_purge+0xea/0xf0 [ 1046.535600] l2tp_tunnel_closeall+0x1fe/0x370 [ 1046.540101] ? l2tp_tunnel_find+0x490/0x490 [ 1046.544427] ? udp_v6_flush_pending_frames+0xd0/0xd0 [ 1046.549563] l2tp_udp_encap_destroy+0x8d/0xf0 [ 1046.554072] udpv6_destroy_sock+0xa6/0xd0 [ 1046.558227] sk_common_release+0x64/0x2f0 [ 1046.562377] inet_release+0xdf/0x1b0 [ 1046.566092] inet6_release+0x4c/0x70 [ 1046.569807] __sock_release+0xcd/0x2b0 [ 1046.573701] ? __sock_release+0x2b0/0x2b0 [ 1046.577851] sock_close+0x15/0x20 [ 1046.581309] __fput+0x25f/0x790 [ 1046.584600] task_work_run+0x113/0x190 [ 1046.588494] exit_to_usermode_loop+0x1d6/0x220 [ 1046.593157] do_syscall_64+0x4a3/0x640 [ 1046.597058] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1046.602246] RIP: 0033:0x416421 [ 1046.605428] RSP: 002b:00007ffc27296760 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1046.613139] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416421 [ 1046.620408] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000004 [ 1046.627684] RBP: 0000000000000000 R08: 01ffffffffffffff R09: 01ffffffffffffff [ 1046.634954] R10: 00007ffc27296840 R11: 0000000000000293 R12: 000000000076bfa0 [ 1046.642238] R13: 0000000000770908 R14: 00000000000ff640 R15: 000000000076bfac [ 1046.650760] Kernel Offset: disabled [ 1046.654401] Rebooting in 86400 seconds..