"740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:24 executing program 4:

06:39:24 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0xcb, 0x8}, 'port0\x00', 0x24, 0x0, 0x5f, 0x0, 0x1, 0xa5, 0x5, 0x0, 0x2, 0x1ff})
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000726469803d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x2, 0x10000)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x0, 0x3a8, 0x0, 0x148, 0x3a8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x5, &(0x7f0000000440), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x5, 0x4, 0xad}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x8, 0x1, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x11, @remote, @rand_addr=0x3, @port=0x4e22, @port=0x4e23}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@cgroup0={0x28, 'cgroup\x00', 0x0, {0x3, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x20, 0x30a}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0xfffff847, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@socket3={0x28, 'socket\x00', 0x3, 0x1}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x10, 0x4, 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, [], 0x14}, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @icmp_id=0x68, @port=0x4e20}}}, {{@ip={@rand_addr, @rand_addr=0x5, 0xffffff00, 0xff000000, 'ip6erspan0\x00', 'veth0_to_bridge\x00', {}, {0x1fe}, 0x33, 0x0, 0x91}, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @port=0x4e23, @port=0x4e24}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000000c0))
futimesat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}})
accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000140)=0x6e, 0xc0000)

06:39:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0xd000, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:24 executing program 4:

06:39:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a3000500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0xd000, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:24 executing program 4:

06:39:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a3000500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:24 executing program 0:

06:39:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0xd000, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:27 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:27 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev}, 0x20)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x19)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="a9c3420c3daa9fc35d4be59b6cabd493", 0x0, 0x1, 0x0, 0x5}, 0x20)
wait4(0x0, 0x0, 0x0, 0x0)

06:39:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a3000500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:27 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:27 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)='j', 0x1, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
read(r1, &(0x7f0000000080)=""/164, 0xa4)
poll(&(0x7f0000000500)=[{r1}], 0x2000000000000031, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})

06:39:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0xd000, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a300050000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:27 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

06:39:27 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000140)=0x6e)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

06:39:28 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x8100, 0x0}}], 0x210, 0x0, 0x0)

06:39:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

06:39:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a300050000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:28 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = geteuid()
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_on='xino=on'}], [{@subj_type={'subj_type', 0x3d, 'workdir'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r0}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@seclabel='la\x00el\x00'}, {@audit='audit'}, {@appraise='appraise'}, {@pcr={'pcr', 0x3d, 0x17}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1197.762434][T10073] overlayfs: unrecognized mount option "subj_type=workdir" or missing value
06:39:28 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000080)=@bcast)

06:39:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

06:39:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a300050000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:28 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x1}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x2000000, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x1}], 0x1}}], 0x2, 0x0)

06:39:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

06:39:28 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:28 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0))
fanotify_mark(r2, 0x8, 0x50000020, r0, &(0x7f00000000c0)='./bus\x00')

06:39:28 executing program 0:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6e62642872586e2741869a1c17d7eb2947f35fc6a9445bcb17e5529b7404fc72e53f3ca68d75f58899d55c32ae7b866e33d7c459eb48bf0a26dc8818235e6ebd71ccafb978a611f86e3fa0491b81cbe1732814fd9e51f51a19b7a53b141d3620df8e1fae164dedcff3e1da0b87951cd3351a30cf9fd04061f2cc7d85b7327ca761e2138f60cdf52e470207ebfe56ebd6aee01e98a371b2a82af731fa84f27ec30717b6565f07ca82fe03a54a482401898c4af5916196cd159e5785ca2a9403c46a6fa0c2d4105523d13cd1762afbf64f5bad9c9be9704fc6d1581d696e11c1904f48ffae371af184b7405ff6321d4f5908a24cb85914cca0e794540e27aec14f"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0)

06:39:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

06:39:29 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:29 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)

06:39:29 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:29 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x100000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
splice(r1, &(0x7f0000000080)=0x20000, r2, &(0x7f00000000c0), 0xef, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:29 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:29 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:29 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x720, 0x81, 0x4}, &(0x7f00000000c0)=0x10)

06:39:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:29 executing program 4:
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:29 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469603d2e2f6275732c776f726b6469723d2e2f66696c65312c757070657264690600000000000000302c00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:29 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:29 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:29 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:29 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:30 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:30 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:30 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:30 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:30 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:32 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xa200, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xffff, 0x4)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:32 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:32 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:32 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:32 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:32 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:33 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:33 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:33 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:33 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:33 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:33 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f7271a4a163bf97ebfcc9845fb9f2cb6b6469723d2e2f666962d0fe6689ee71df8e91e084950bffff38e13df10b9488e20c4f6256268a"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:36 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:36 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:36 executing program 4:
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1205.698997][T10680] overlayfs: unrecognized mount option "worq¤¡c¿—ëüÉ„_¹òËkdir=./fibÐþf‰îqߎ‘à„•ÿÿ8á=ñ”ˆâObV&Š" or missing value
06:39:36 executing program 4:
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 5:
mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x4)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file1\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x800, 0x1)
write(r2, &(0x7f00000002c0)="f8c7e433235b4edc982c632c8499d759c4a24fd04324bba290a6a3c1583647ca2f2c677e61d8c9753971067aa000530d31c48472a92e9af1c5375c911290b19c7b475cae2b99f6464282cdc1b7437a995e1b181c4050375435fef0dce0a4ed06a95d35465cbd4f81c7b61aad1c3bc765bb14f5e2740f74653a4688537723829b8c4690e8df29d3733ff68f8b24f60c596ff350ff5e2a80e059cf5f51e2a057596e2d5d9a95506782d6d36b6b7f2b95e30cf3b9d3af603acee2cbacd4fa82", 0xbe)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x7}]}, 0xc, 0x1)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:36 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:36 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 4:
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x0, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:36 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:36 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x0, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:36 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20, 0x109000)
r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0))
fanotify_mark(r0, 0x8, 0x40000000, r2, &(0x7f00000000c0)='./file2\x00')
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:36 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:36 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:36 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x0, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:36 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:37 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:37 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:37 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x120400, &(0x7f0000000140)=ANY=[@ANYBLOB="75707065726469723d2e2f62ca562f66696c65302c64656661756c745f7065726d697373696f6e732c00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:37 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:37 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:37 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:37 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:37 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:37 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:40 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:40 executing program 0 (fault-call:5 fault-nth:0):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:40 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:40 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:40 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = getpid()
capget(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000200))
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/psched\x00')
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:40 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1209.918298][T11133] FAULT_INJECTION: forcing a failure.
[ 1209.918298][T11133] name failslab, interval 1, probability 0, space 0, times 0
06:39:40 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1209.986213][T11133] CPU: 1 PID: 11133 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1209.986223][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1210.004125][T11133] Call Trace:
[ 1210.004154][T11133]  dump_stack+0x1d8/0x2f8
[ 1210.004170][T11133]  should_fail+0x555/0x770
[ 1210.004189][T11133]  __should_failslab+0x11a/0x160
[ 1210.004199][T11133]  ? getname_flags+0xba/0x640
[ 1210.004215][T11133]  should_failslab+0x9/0x20
[ 1210.011825][T11133]  kmem_cache_alloc+0x56/0x2e0
06:39:40 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1210.011838][T11133]  ? __f_unlock_pos+0x19/0x20
[ 1210.011852][T11133]  getname_flags+0xba/0x640
[ 1210.021173][T11133]  user_path_at_empty+0x2d/0x50
[ 1210.021188][T11133]  path_setxattr+0x51/0x1c0
[ 1210.021204][T11133]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1210.030378][T11133]  __x64_sys_setxattr+0xc5/0xe0
[ 1210.030396][T11133]  do_syscall_64+0xf7/0x1c0
[ 1210.030412][T11133]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1210.030426][T11133] RIP: 0033:0x459a59
[ 1210.039843][T11133] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1210.039850][T11133] RSP: 002b:00007fac92b3bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1210.039858][T11133] RAX: ffffffffffffffda RBX: 00007fac92b3bc90 RCX: 0000000000459a59
[ 1210.039864][T11133] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1210.039870][T11133] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1210.039876][T11133] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b3c6d4
[ 1210.039885][T11133] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
06:39:40 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

06:39:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:40 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mknod(&(0x7f0000000080)='./bus/file0\x00', 0x20, 0x3ff)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000200)='afs\x00', 0x86821, &(0x7f00000002c0)='overlay\x00')
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:40 executing program 0 (fault-call:5 fault-nth:1):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:40 executing program 3:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:40 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:40 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

[ 1210.509949][T11276] FAULT_INJECTION: forcing a failure.
[ 1210.509949][T11276] name failslab, interval 1, probability 0, space 0, times 0
[ 1210.535555][T11276] CPU: 0 PID: 11276 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1210.543540][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1210.543547][T11276] Call Trace:
06:39:41 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

[ 1210.543574][T11276]  dump_stack+0x1d8/0x2f8
[ 1210.543589][T11276]  should_fail+0x555/0x770
[ 1210.543608][T11276]  __should_failslab+0x11a/0x160
[ 1210.543621][T11276]  ? __d_alloc+0x2d/0x6e0
[ 1210.543634][T11276]  should_failslab+0x9/0x20
[ 1210.543643][T11276]  kmem_cache_alloc+0x56/0x2e0
[ 1210.543652][T11276]  ? __lock_acquire+0xc75/0x1be0
[ 1210.543662][T11276]  __d_alloc+0x2d/0x6e0
[ 1210.543675][T11276]  d_alloc_parallel+0x7f/0x1430
[ 1210.543690][T11276]  ? memset+0x31/0x40
[ 1210.543705][T11276]  ? lockdep_init_map+0x2a/0x680
[ 1210.543722][T11276]  __lookup_slow+0xa7/0x380
[ 1210.543744][T11276]  walk_component+0x2d6/0x7b0
[ 1210.543767][T11276]  path_lookupat+0x1ac/0xb30
[ 1210.543783][T11276]  ? check_preemption_disabled+0x47/0x2a0
[ 1210.543796][T11276]  filename_lookup+0x1d4/0x690
[ 1210.543815][T11276]  ? strncpy_from_user+0x361/0x3f0
[ 1210.543836][T11276]  user_path_at_empty+0x40/0x50
[ 1210.543847][T11276]  path_setxattr+0x51/0x1c0
[ 1210.543862][T11276]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1210.543874][T11276]  __x64_sys_setxattr+0xc5/0xe0
[ 1210.543887][T11276]  do_syscall_64+0xf7/0x1c0
[ 1210.543912][T11276]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1210.584387][T11276] RIP: 0033:0x459a59
[ 1210.584408][T11276] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1210.593455][T11276] RSP: 002b:00007fac92b3bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1210.593467][T11276] RAX: ffffffffffffffda RBX: 00007fac92b3bc90 RCX: 0000000000459a59
[ 1210.593473][T11276] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1210.593480][T11276] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1210.593486][T11276] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b3c6d4
[ 1210.593493][T11276] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
06:39:41 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)

06:39:41 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:41 executing program 0 (fault-call:5 fault-nth:2):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:41 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:41 executing program 3 (fault-call:2 fault-nth:0):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:41 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1210.958285][T11297] FAULT_INJECTION: forcing a failure.
[ 1210.958285][T11297] name failslab, interval 1, probability 0, space 0, times 0
[ 1211.005841][T11297] CPU: 1 PID: 11297 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1211.013678][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1211.013685][T11297] Call Trace:
[ 1211.013708][T11297]  dump_stack+0x1d8/0x2f8
[ 1211.013726][T11297]  should_fail+0x555/0x770
[ 1211.013746][T11297]  __should_failslab+0x11a/0x160
[ 1211.031395][T11297]  ? tomoyo_realpath_from_path+0xdc/0x7c0
[ 1211.031410][T11297]  should_failslab+0x9/0x20
[ 1211.031421][T11297]  __kmalloc+0x7a/0x340
[ 1211.031432][T11297]  ? tomoyo_realpath_from_path+0xca/0x7c0
[ 1211.051340][T11298] FAULT_INJECTION: forcing a failure.
[ 1211.051340][T11298] name failslab, interval 1, probability 0, space 0, times 0
[ 1211.055093][T11297]  tomoyo_realpath_from_path+0xdc/0x7c0
[ 1211.055115][T11297]  tomoyo_path_number_perm+0x166/0x640
[ 1211.055149][T11297]  ? smack_file_ioctl+0x226/0x2e0
[ 1211.089362][T11297]  ? __fget+0x401/0x510
[ 1211.093512][T11297]  tomoyo_file_ioctl+0x23/0x30
[ 1211.098266][T11297]  security_file_ioctl+0x6d/0xd0
[ 1211.103193][T11297]  __x64_sys_ioctl+0xa3/0x120
[ 1211.107869][T11297]  do_syscall_64+0xf7/0x1c0
[ 1211.112375][T11297]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1211.118279][T11297] RIP: 0033:0x459a59
[ 1211.122165][T11297] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1211.141757][T11297] RSP: 002b:00007f9dd3f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1211.150156][T11297] RAX: ffffffffffffffda RBX: 00007f9dd3f45c90 RCX: 0000000000459a59
[ 1211.158117][T11297] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1211.166076][T11297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1211.174034][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f466d4
[ 1211.181991][T11297] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1211.189980][T11298] CPU: 0 PID: 11298 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1211.197786][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1211.207839][T11298] Call Trace:
[ 1211.207860][T11298]  dump_stack+0x1d8/0x2f8
[ 1211.207875][T11298]  should_fail+0x555/0x770
[ 1211.207892][T11298]  __should_failslab+0x11a/0x160
[ 1211.207905][T11298]  ? kcalloc+0x2f/0x50
[ 1211.207916][T11298]  should_failslab+0x9/0x20
[ 1211.207930][T11298]  __kmalloc+0x7a/0x340
[ 1211.215517][T11298]  ? __kasan_check_write+0x14/0x20
[ 1211.224857][T11298]  kcalloc+0x2f/0x50
[ 1211.224868][T11298]  ovl_lookup+0x661/0x1c70
[ 1211.224879][T11298]  ? ovl_lookup+0x490/0x1c70
[ 1211.224889][T11298]  ? rcu_lock_release+0x9/0x30
[ 1211.224923][T11298]  __lookup_slow+0x285/0x380
[ 1211.224942][T11298]  walk_component+0x2d6/0x7b0
[ 1211.224961][T11298]  path_lookupat+0x1ac/0xb30
[ 1211.233488][T11298]  ? check_preemption_disabled+0x47/0x2a0
[ 1211.233501][T11298]  filename_lookup+0x1d4/0x690
[ 1211.233521][T11298]  ? strncpy_from_user+0x361/0x3f0
[ 1211.242757][T11298]  user_path_at_empty+0x40/0x50
[ 1211.242774][T11298]  path_setxattr+0x51/0x1c0
[ 1211.251391][T11298]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1211.251410][T11298]  __x64_sys_setxattr+0xc5/0xe0
[ 1211.260722][T11298]  do_syscall_64+0xf7/0x1c0
[ 1211.260743][T11298]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1211.269969][T11298] RIP: 0033:0x459a59
[ 1211.269980][T11298] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1211.269988][T11298] RSP: 002b:00007fac92b5cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1211.280241][T11298] RAX: ffffffffffffffda RBX: 00007fac92b5cc90 RCX: 0000000000459a59
[ 1211.280248][T11298] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1211.280254][T11298] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1211.280259][T11298] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b5d6d4
[ 1211.280268][T11298] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
[ 1211.325502][T11297] ERROR: Out of memory at tomoyo_realpath_from_path.
06:39:43 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='./file0\x00')
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'})
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@xino_off='xino=off'}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:43 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

06:39:43 executing program 3 (fault-call:2 fault-nth:1):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:43 executing program 0 (fault-call:5 fault-nth:3):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:43 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:43 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1213.535183][T11332] FAULT_INJECTION: forcing a failure.
[ 1213.535183][T11332] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1213.548433][T11332] CPU: 0 PID: 11332 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1213.550316][T11334] FAULT_INJECTION: forcing a failure.
[ 1213.550316][T11334] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.556247][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1213.556253][T11332] Call Trace:
[ 1213.556274][T11332]  dump_stack+0x1d8/0x2f8
[ 1213.556290][T11332]  should_fail+0x555/0x770
[ 1213.556306][T11332]  should_fail_alloc_page+0x55/0x60
[ 1213.556315][T11332]  prepare_alloc_pages+0x283/0x460
[ 1213.556328][T11332]  __alloc_pages_nodemask+0xb2/0x5d0
[ 1213.556346][T11332]  kmem_getpages+0x4d/0xa00
[ 1213.556358][T11332]  cache_grow_begin+0x7e/0x2c0
[ 1213.556371][T11332]  cache_alloc_refill+0x311/0x3f0
[ 1213.556382][T11332]  ? check_preemption_disabled+0xb7/0x2a0
[ 1213.556397][T11332]  __kmalloc+0x318/0x340
[ 1213.570700][T11330] overlayfs: missing 'lowerdir'
[ 1213.579055][T11332]  ? tomoyo_realpath_from_path+0xdc/0x7c0
[ 1213.579069][T11332]  tomoyo_realpath_from_path+0xdc/0x7c0
[ 1213.579089][T11332]  tomoyo_path_number_perm+0x166/0x640
[ 1213.579123][T11332]  ? smack_file_ioctl+0x226/0x2e0
[ 1213.579135][T11332]  ? __fget+0x401/0x510
[ 1213.579147][T11332]  tomoyo_file_ioctl+0x23/0x30
[ 1213.579162][T11332]  security_file_ioctl+0x6d/0xd0
[ 1213.579178][T11332]  __x64_sys_ioctl+0xa3/0x120
[ 1213.676185][T11332]  do_syscall_64+0xf7/0x1c0
06:39:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002d5218215b3a26adfc7c8e96989f0f71c18a8ecb7d81e8732d095c22960bfc1c63197603d1393816dd1042828992d3cccabd198bdb66d2ff2a5786e11b1a7744f9b920704e76533230f790ec1c363bd3c8ed7f79c998beef1da0355ed5ddea257f92cefac708839cf3cdb14462b14e66d130c5886f5a17caa9b0166e6f2819cc16c0e7dadb2658190833959bc3f6984fd531775cb246f8be99af0528bac00e5b8d59ff354334f0f987d7c5fa1df980"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1213.680695][T11332]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1213.686579][T11332] RIP: 0033:0x459a59
[ 1213.690461][T11332] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1213.710062][T11332] RSP: 002b:00007f9dd3f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1213.718473][T11332] RAX: ffffffffffffffda RBX: 00007f9dd3f24c90 RCX: 0000000000459a59
[ 1213.726462][T11332] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1213.726468][T11332] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1213.726474][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f256d4
[ 1213.726480][T11332] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1213.732788][T11334] CPU: 0 PID: 11334 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1213.750487][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1213.750493][T11334] Call Trace:
[ 1213.750511][T11334]  dump_stack+0x1d8/0x2f8
[ 1213.750529][T11334]  should_fail+0x555/0x770
[ 1213.788346][T11334]  __should_failslab+0x11a/0x160
[ 1213.793312][T11334]  ? __d_alloc+0x2d/0x6e0
[ 1213.797656][T11334]  should_failslab+0x9/0x20
[ 1213.797667][T11334]  kmem_cache_alloc+0x56/0x2e0
[ 1213.797678][T11334]  ? __lock_acquire+0xc75/0x1be0
[ 1213.797689][T11334]  __d_alloc+0x2d/0x6e0
[ 1213.797700][T11334]  d_alloc_parallel+0x7f/0x1430
[ 1213.797713][T11334]  ? memset+0x31/0x40
[ 1213.797722][T11334]  ? lockdep_init_map+0x2a/0x680
[ 1213.797737][T11334]  __lookup_slow+0xa7/0x380
[ 1213.797754][T11334]  lookup_one_len_unlocked+0xe0/0x1d0
[ 1213.797770][T11334]  ovl_lookup_single+0x67/0x8b0
[ 1213.797783][T11334]  ovl_lookup_layer+0x3ad/0x470
[ 1213.816614][T11334]  ? __kasan_check_write+0x14/0x20
[ 1213.816634][T11334]  ovl_lookup+0x393/0x1c70
[ 1213.816649][T11334]  ? rcu_lock_release+0x9/0x30
[ 1213.816664][T11334]  ? d_alloc_parallel+0x134d/0x1430
[ 1213.816688][T11334]  __lookup_slow+0x285/0x380
[ 1213.816706][T11334]  walk_component+0x2d6/0x7b0
[ 1213.816724][T11334]  path_lookupat+0x1ac/0xb30
06:39:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1213.816739][T11334]  ? check_preemption_disabled+0x47/0x2a0
[ 1213.816751][T11334]  filename_lookup+0x1d4/0x690
[ 1213.816769][T11334]  ? strncpy_from_user+0x361/0x3f0
[ 1213.816788][T11334]  user_path_at_empty+0x40/0x50
[ 1213.840376][T11334]  path_setxattr+0x51/0x1c0
[ 1213.840395][T11334]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1213.840408][T11334]  __x64_sys_setxattr+0xc5/0xe0
[ 1213.840424][T11334]  do_syscall_64+0xf7/0x1c0
[ 1213.859615][T11334]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1213.859627][T11334] RIP: 0033:0x459a59
[ 1213.859638][T11334] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1213.859643][T11334] RSP: 002b:00007fac92b3bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1213.908243][T11334] RAX: ffffffffffffffda RBX: 00007fac92b3bc90 RCX: 0000000000459a59
[ 1213.908250][T11334] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1213.908257][T11334] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
06:39:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

[ 1213.908263][T11334] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b3c6d4
[ 1213.908269][T11334] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
[ 1213.919480][T11445] overlayfs: missing 'lowerdir'
06:39:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62a1c62c5f0d7cc355706a2bdb7a4ed367372cd5776f72bf47bd8359ba59707065080069723d2e2f660c471be6ddf07bcd0000000000"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}]})

06:39:44 executing program 3 (fault-call:2 fault-nth:2):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:44 executing program 0 (fault-call:5 fault-nth:4):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}]})

[ 1214.252606][T11567] FAULT_INJECTION: forcing a failure.
[ 1214.252606][T11567] name failslab, interval 1, probability 0, space 0, times 0
[ 1214.287602][T11567] CPU: 1 PID: 11567 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
06:39:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1214.295473][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1214.295492][T11567] Call Trace:
[ 1214.295510][T11567]  dump_stack+0x1d8/0x2f8
[ 1214.295526][T11567]  should_fail+0x555/0x770
[ 1214.317718][T11567]  __should_failslab+0x11a/0x160
[ 1214.317734][T11567]  should_failslab+0x9/0x20
[ 1214.317745][T11567]  kmem_cache_alloc_node_trace+0x6e/0x2d0
[ 1214.317753][T11567]  ? __kmalloc_node+0x3c/0x60
[ 1214.317767][T11567]  __kmalloc_node+0x3c/0x60
[ 1214.332898][T11567]  kvmalloc_node+0xcc/0x130
[ 1214.332914][T11567]  vhost_dev_ioctl+0x972/0x1260
[ 1214.332937][T11567]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1214.332950][T11567]  ? peek_head_len+0x9d0/0x9d0
[ 1214.332966][T11567]  do_vfs_ioctl+0x744/0x1730
[ 1214.346996][T11567]  ? __fget+0x401/0x510
[ 1214.347015][T11567]  ? tomoyo_file_ioctl+0x23/0x30
[ 1214.347030][T11567]  ? security_file_ioctl+0xa1/0xd0
[ 1214.366488][T11567]  __x64_sys_ioctl+0xe3/0x120
[ 1214.366503][T11567]  do_syscall_64+0xf7/0x1c0
[ 1214.366518][T11567]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1214.380687][T11567] RIP: 0033:0x459a59
[ 1214.380699][T11567] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1214.380704][T11567] RSP: 002b:00007f9dd3f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1214.380714][T11567] RAX: ffffffffffffffda RBX: 00007f9dd3f45c90 RCX: 0000000000459a59
[ 1214.380731][T11567] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1214.389887][T11567] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1214.389894][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f466d4
[ 1214.389899][T11567] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1214.469297][T11580] FAULT_INJECTION: forcing a failure.
[ 1214.469297][T11580] name failslab, interval 1, probability 0, space 0, times 0
[ 1214.496380][T11580] CPU: 1 PID: 11580 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1214.504350][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1214.514409][T11580] Call Trace:
[ 1214.517719][T11580]  dump_stack+0x1d8/0x2f8
[ 1214.522055][T11580]  should_fail+0x555/0x770
[ 1214.526484][T11580]  __should_failslab+0x11a/0x160
[ 1214.531405][T11580]  ? __d_alloc+0x2d/0x6e0
[ 1214.535720][T11580]  should_failslab+0x9/0x20
[ 1214.540226][T11580]  kmem_cache_alloc+0x56/0x2e0
[ 1214.545081][T11580]  ? __lock_acquire+0xc75/0x1be0
[ 1214.550014][T11580]  __d_alloc+0x2d/0x6e0
[ 1214.554162][T11580]  d_alloc_parallel+0x7f/0x1430
[ 1214.559461][T11580]  ? memset+0x31/0x40
[ 1214.563421][T11580]  ? lockdep_init_map+0x2a/0x680
[ 1214.568376][T11580]  __lookup_slow+0xa7/0x380
[ 1214.572889][T11580]  lookup_one_len_unlocked+0xe0/0x1d0
[ 1214.578266][T11580]  ovl_lookup_single+0x67/0x8b0
[ 1214.583122][T11580]  ovl_lookup_layer+0x3ad/0x470
[ 1214.587953][T11580]  ? kcalloc+0x2f/0x50
[ 1214.592050][T11580]  ovl_lookup+0x843/0x1c70
[ 1214.596449][T11580]  ? ovl_lookup+0x490/0x1c70
[ 1214.601130][T11580]  __lookup_slow+0x285/0x380
[ 1214.605708][T11580]  walk_component+0x2d6/0x7b0
[ 1214.610420][T11580]  path_lookupat+0x1ac/0xb30
[ 1214.615042][T11580]  ? check_preemption_disabled+0x47/0x2a0
[ 1214.620739][T11580]  filename_lookup+0x1d4/0x690
[ 1214.625491][T11580]  ? strncpy_from_user+0x361/0x3f0
[ 1214.630598][T11580]  user_path_at_empty+0x40/0x50
[ 1214.635444][T11580]  path_setxattr+0x51/0x1c0
[ 1214.639933][T11580]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1214.645630][T11580]  __x64_sys_setxattr+0xc5/0xe0
[ 1214.650461][T11580]  do_syscall_64+0xf7/0x1c0
[ 1214.654948][T11580]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1214.660819][T11580] RIP: 0033:0x459a59
[ 1214.664692][T11580] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1214.684399][T11580] RSP: 002b:00007fac92b3bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1214.692838][T11580] RAX: ffffffffffffffda RBX: 00007fac92b3bc90 RCX: 0000000000459a59
06:39:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

[ 1214.700800][T11580] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1214.708759][T11580] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1214.716712][T11580] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b3c6d4
[ 1214.724665][T11580] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
06:39:45 executing program 0 (fault-call:5 fault-nth:5):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:45 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:45 executing program 3 (fault-call:2 fault-nth:3):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1214.945498][T11600] FAULT_INJECTION: forcing a failure.
[ 1214.945498][T11600] name failslab, interval 1, probability 0, space 0, times 0
[ 1215.011987][T11600] CPU: 1 PID: 11600 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1215.019833][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1215.029979][T11600] Call Trace:
[ 1215.033279][T11600]  dump_stack+0x1d8/0x2f8
[ 1215.037620][T11600]  should_fail+0x555/0x770
[ 1215.042043][T11600]  __should_failslab+0x11a/0x160
[ 1215.047117][T11600]  should_failslab+0x9/0x20
[ 1215.051600][T11600]  kmem_cache_alloc_node_trace+0x6e/0x2d0
[ 1215.057306][T11600]  ? __kmalloc_node+0x3c/0x60
[ 1215.061970][T11600]  __kmalloc_node+0x3c/0x60
[ 1215.066469][T11600]  kvmalloc_node+0xcc/0x130
[ 1215.070975][T11600]  vhost_dev_ioctl+0x972/0x1260
[ 1215.075841][T11600]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1215.081140][T11600]  ? peek_head_len+0x9d0/0x9d0
[ 1215.085908][T11600]  do_vfs_ioctl+0x744/0x1730
[ 1215.090474][T11600]  ? __fget+0x401/0x510
[ 1215.094607][T11600]  ? tomoyo_file_ioctl+0x23/0x30
[ 1215.099566][T11600]  ? security_file_ioctl+0xa1/0xd0
[ 1215.105798][T11600]  __x64_sys_ioctl+0xe3/0x120
[ 1215.110498][T11600]  do_syscall_64+0xf7/0x1c0
[ 1215.114988][T11600]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1215.120867][T11600] RIP: 0033:0x459a59
[ 1215.124750][T11600] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1215.144427][T11600] RSP: 002b:00007f9dd3f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1215.152904][T11600] RAX: ffffffffffffffda RBX: 00007f9dd3f24c90 RCX: 0000000000459a59
[ 1215.160852][T11600] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1215.168803][T11600] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1215.176749][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f256d4
[ 1215.184694][T11600] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1215.194748][T11607] FAULT_INJECTION: forcing a failure.
[ 1215.194748][T11607] name failslab, interval 1, probability 0, space 0, times 0
[ 1215.208718][T11607] CPU: 0 PID: 11607 Comm: syz-executor.0 Not tainted 5.4.0-rc3 #0
[ 1215.216634][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1215.226680][T11607] Call Trace:
[ 1215.229960][T11607]  dump_stack+0x1d8/0x2f8
[ 1215.234282][T11607]  should_fail+0x555/0x770
[ 1215.238708][T11607]  __should_failslab+0x11a/0x160
[ 1215.243644][T11607]  ? kzalloc+0x1f/0x40
[ 1215.247703][T11607]  should_failslab+0x9/0x20
[ 1215.252201][T11607]  __kmalloc+0x7a/0x340
[ 1215.256346][T11607]  kzalloc+0x1f/0x40
[ 1215.260234][T11607]  ovl_alloc_entry+0x21/0x80
[ 1215.264803][T11607]  ovl_lookup+0x12cf/0x1c70
[ 1215.269295][T11607]  ? ovl_lookup+0x490/0x1c70
[ 1215.273899][T11607]  __lookup_slow+0x285/0x380
[ 1215.278497][T11607]  walk_component+0x2d6/0x7b0
[ 1215.283162][T11607]  path_lookupat+0x1ac/0xb30
[ 1215.287737][T11607]  ? check_preemption_disabled+0x47/0x2a0
[ 1215.293456][T11607]  filename_lookup+0x1d4/0x690
[ 1215.298227][T11607]  ? strncpy_from_user+0x361/0x3f0
[ 1215.303340][T11607]  user_path_at_empty+0x40/0x50
[ 1215.308182][T11607]  path_setxattr+0x51/0x1c0
[ 1215.312669][T11607]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 1215.318383][T11607]  __x64_sys_setxattr+0xc5/0xe0
[ 1215.323224][T11607]  do_syscall_64+0xf7/0x1c0
[ 1215.327726][T11607]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1215.333619][T11607] RIP: 0033:0x459a59
[ 1215.337506][T11607] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1215.357205][T11607] RSP: 002b:00007fac92b3bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1215.365603][T11607] RAX: ffffffffffffffda RBX: 00007fac92b3bc90 RCX: 0000000000459a59
[ 1215.373552][T11607] RDX: 0000000020000500 RSI: 0000000020000040 RDI: 0000000020000080
[ 1215.381500][T11607] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1215.389553][T11607] R10: 0000000000000024 R11: 0000000000000246 R12: 00007fac92b3c6d4
[ 1215.397522][T11607] R13: 00000000004c0499 R14: 00000000004df738 R15: 0000000000000005
06:39:47 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:47 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}]})

06:39:47 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x34, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:47 executing program 0 (fault-call:5 fault-nth:6):
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:47 executing program 3 (fault-call:2 fault-nth:4):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:47 executing program 5:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dv/dri?carf#\x00', 0x9, 0x34040)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0xee)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = fcntl$dupfd(r0, 0x406, r4)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x8001, 0x4, 0x4, &(0x7f0000ffb000/0x2000)=nil, 0x400})
r6 = open(&(0x7f0000000140)='./bus\x00', 0x100000, 0x10)
ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0x0, 0x0, 0xfc, 0x4}, {0x2, 0x8001, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x2, 0x4}], 0x1})
ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/76)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726569723d2e2f62752e2f66699b78312c7570dd7d92590ade343bcad609cbaf9abd7065726469723d2e2f66696c65302c00436474c1f98e11b5f3f5d1f8b322ed5b91d696b3eaf9071e63a46df524f9c811cbe7a856617c420f567d23b60d0b06a09a0deb75e6bb0ba95da37a114125452d88a0039facf8192687633638f735282597eeb6f63a4f0000000000000000"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1217.224252][T11627] FAULT_INJECTION: forcing a failure.
[ 1217.224252][T11627] name failslab, interval 1, probability 0, space 0, times 0
06:39:47 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1217.269866][T11627] CPU: 1 PID: 11627 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1217.277741][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1217.277746][T11627] Call Trace:
[ 1217.277765][T11627]  dump_stack+0x1d8/0x2f8
[ 1217.277785][T11627]  should_fail+0x555/0x770
[ 1217.277804][T11627]  __should_failslab+0x11a/0x160
[ 1217.277823][T11627]  should_failslab+0x9/0x20
[ 1217.277834][T11627]  kmem_cache_alloc_node_trace+0x6e/0x2d0
[ 1217.277843][T11627]  ? __kmalloc_node+0x3c/0x60
[ 1217.277857][T11627]  __kmalloc_node+0x3c/0x60
[ 1217.277869][T11627]  kvmalloc_node+0xcc/0x130
[ 1217.277883][T11627]  vhost_dev_ioctl+0xa4e/0x1260
[ 1217.277907][T11627]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1217.277924][T11627]  ? peek_head_len+0x9d0/0x9d0
[ 1217.277936][T11627]  do_vfs_ioctl+0x744/0x1730
[ 1217.277944][T11627]  ? __fget+0x401/0x510
[ 1217.277960][T11627]  ? tomoyo_file_ioctl+0x23/0x30
[ 1217.277972][T11627]  ? security_file_ioctl+0xa1/0xd0
[ 1217.277986][T11627]  __x64_sys_ioctl+0xe3/0x120
06:39:47 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:47 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}]})

[ 1217.300308][T11628] overlayfs: unrecognized mount option "lowereir=./bu./fi›x1" or missing value
[ 1217.305767][T11627]  do_syscall_64+0xf7/0x1c0
[ 1217.305786][T11627]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1217.305795][T11627] RIP: 0033:0x459a59
[ 1217.305805][T11627] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1217.305810][T11627] RSP: 002b:00007f9dd3f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
06:39:47 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1217.305819][T11627] RAX: ffffffffffffffda RBX: 00007f9dd3f24c90 RCX: 0000000000459a59
[ 1217.305824][T11627] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1217.305834][T11627] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1217.339751][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f256d4
[ 1217.339758][T11627] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:39:48 executing program 3 (fault-call:2 fault-nth:5):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:48 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]})

06:39:48 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1217.698822][T11754] FAULT_INJECTION: forcing a failure.
[ 1217.698822][T11754] name failslab, interval 1, probability 0, space 0, times 0
[ 1217.757771][T11754] CPU: 0 PID: 11754 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1217.765615][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1217.775753][T11754] Call Trace:
[ 1217.775773][T11754]  dump_stack+0x1d8/0x2f8
[ 1217.775791][T11754]  should_fail+0x555/0x770
[ 1217.775812][T11754]  __should_failslab+0x11a/0x160
[ 1217.775828][T11754]  should_failslab+0x9/0x20
[ 1217.797252][T11754]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1217.802562][T11754]  ? vhost_new_umem_range+0x7d/0x630
[ 1217.807853][T11754]  vhost_new_umem_range+0x7d/0x630
[ 1217.812997][T11754]  ? kasan_kmalloc+0x9/0x10
[ 1217.817499][T11754]  ? __kmalloc_node+0x4d/0x60
[ 1217.822182][T11754]  vhost_dev_ioctl+0xb87/0x1260
[ 1217.826117][T11764] overlayfs: failed to resolve './file1': -2
[ 1217.827045][T11754]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1217.838282][T11754]  ? peek_head_len+0x9d0/0x9d0
[ 1217.843048][T11754]  do_vfs_ioctl+0x744/0x1730
[ 1217.847630][T11754]  ? __fget+0x401/0x510
[ 1217.847653][T11754]  ? tomoyo_file_ioctl+0x23/0x30
06:39:48 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1217.856707][T11754]  ? security_file_ioctl+0xa1/0xd0
[ 1217.856722][T11754]  __x64_sys_ioctl+0xe3/0x120
[ 1217.856738][T11754]  do_syscall_64+0xf7/0x1c0
[ 1217.856758][T11754]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1217.876852][T11754] RIP: 0033:0x459a59
[ 1217.880743][T11754] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
06:39:48 executing program 5:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r6, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r6, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:39:48 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]})

[ 1217.900338][T11754] RSP: 002b:00007f9dd3f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1217.908735][T11754] RAX: ffffffffffffffda RBX: 00007f9dd3f24c90 RCX: 0000000000459a59
[ 1217.916707][T11754] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1217.924926][T11754] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1217.932880][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f256d4
[ 1217.940833][T11754] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:39:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system/posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:48 executing program 3 (fault-call:2 fault-nth:6):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:48 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x100000, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]})

06:39:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)

[ 1218.218199][T11792] FAULT_INJECTION: forcing a failure.
[ 1218.218199][T11792] name failslab, interval 1, probability 0, space 0, times 0
[ 1218.253442][T11792] CPU: 0 PID: 11792 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1218.261380][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1218.271436][T11792] Call Trace:
[ 1218.274736][T11792]  dump_stack+0x1d8/0x2f8
[ 1218.279082][T11792]  should_fail+0x555/0x770
[ 1218.283512][T11792]  __should_failslab+0x11a/0x160
[ 1218.288459][T11792]  should_failslab+0x9/0x20
[ 1218.292963][T11792]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1218.298240][T11792]  ? vhost_new_umem_range+0x7d/0x630
[ 1218.298258][T11792]  vhost_new_umem_range+0x7d/0x630
[ 1218.298284][T11792]  vhost_dev_ioctl+0xb87/0x1260
[ 1218.298313][T11792]  vhost_vsock_dev_ioctl+0x137/0xbc0
06:39:48 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1218.308695][T11792]  ? peek_head_len+0x9d0/0x9d0
[ 1218.308712][T11792]  do_vfs_ioctl+0x744/0x1730
[ 1218.308723][T11792]  ? __fget+0x401/0x510
[ 1218.308740][T11792]  ? tomoyo_file_ioctl+0x23/0x30
[ 1218.308755][T11792]  ? security_file_ioctl+0xa1/0xd0
[ 1218.308767][T11792]  __x64_sys_ioctl+0xe3/0x120
[ 1218.318885][T11792]  do_syscall_64+0xf7/0x1c0
[ 1218.318904][T11792]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1218.318920][T11792] RIP: 0033:0x459a59
[ 1218.318930][T11792] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1218.318938][T11792] RSP: 002b:00007f9dd3f24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1218.328239][T11792] RAX: ffffffffffffffda RBX: 00007f9dd3f24c90 RCX: 0000000000459a59
[ 1218.328246][T11792] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1218.328252][T11792] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
06:39:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)

[ 1218.328258][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f256d4
[ 1218.328264][T11792] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:39:49 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1218.482221][T11795] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:49 executing program 3 (fault-call:2 fault-nth:7):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:49 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_de.ault\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1218.682291][T11822] FAULT_INJECTION: forcing a failure.
[ 1218.682291][T11822] name failslab, interval 1, probability 0, space 0, times 0
[ 1218.721786][T11822] CPU: 0 PID: 11822 Comm: syz-executor.3 Not tainted 5.4.0-rc3 #0
[ 1218.729628][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1218.739676][T11822] Call Trace:
[ 1218.742974][T11822]  dump_stack+0x1d8/0x2f8
[ 1218.747308][T11822]  should_fail+0x555/0x770
[ 1218.751735][T11822]  __should_failslab+0x11a/0x160
[ 1218.756682][T11822]  should_failslab+0x9/0x20
[ 1218.761195][T11822]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1218.766477][T11822]  ? vhost_new_umem_range+0x7d/0x630
[ 1218.770996][T11824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1218.771797][T11822]  vhost_new_umem_range+0x7d/0x630
[ 1218.791018][T11822]  vhost_dev_ioctl+0xb87/0x1260
[ 1218.795856][T11822]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1218.801117][T11822]  ? peek_head_len+0x9d0/0x9d0
[ 1218.805860][T11822]  do_vfs_ioctl+0x744/0x1730
[ 1218.810423][T11822]  ? __fget+0x401/0x510
[ 1218.814557][T11822]  ? tomoyo_file_ioctl+0x23/0x30
[ 1218.819554][T11822]  ? security_file_ioctl+0xa1/0xd0
[ 1218.824647][T11822]  __x64_sys_ioctl+0xe3/0x120
[ 1218.829305][T11822]  do_syscall_64+0xf7/0x1c0
[ 1218.833791][T11822]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1218.839659][T11822] RIP: 0033:0x459a59
[ 1218.843573][T11822] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1218.863153][T11822] RSP: 002b:00007f9dd3f45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1218.871548][T11822] RAX: ffffffffffffffda RBX: 00007f9dd3f45c90 RCX: 0000000000459a59
[ 1218.879494][T11822] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1218.887489][T11822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1218.895449][T11822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9dd3f466d4
[ 1218.903415][T11822] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:39:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)

06:39:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:51 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_de/ault\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:51 executing program 3 (fault-call:2 fault-nth:8):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
fstat(r0, &(0x7f0000000340))
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xab, 0x2)
r1 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xa)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@initdev, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r4)
r5 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r6)
setreuid(r6, r4)
mount$overlay(0x400000, &(0x7f0000000200)='./bus/file0\x00', &(0x7f00000003c0)='overlay\x00', 0x1200003, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',rootcontext=system_u,\x00'])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

06:39:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:51 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

[ 1221.235162][T11842] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000080)='./bus\x00')

06:39:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x02', &(0x7f0000000500), 0x24, 0x0)

06:39:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

06:39:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x2, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:52 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r1 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
execveat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380)=[&(0x7f00000000c0)='+securitytrusted\x00', &(0x7f0000000140)='lowerdir', &(0x7f0000000200)=')cgroup}(cpuset^em0\x00', &(0x7f00000002c0)='user&selinuxcgroupself\x00', &(0x7f0000000300)='@{&\x00', &(0x7f0000000340)='@\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='lowerdir'], 0x400)

06:39:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1221.681437][T11980] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x10, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:52 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)

06:39:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x06', &(0x7f0000000500), 0x24, 0x0)

06:39:52 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)

06:39:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4c00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:52 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)

06:39:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1222.118943][T12126] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:55 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upberdir=./file0,\x00'])
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:55 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:39:55 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4c01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7], 0x2}}, 0x0)

06:39:55 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\f', &(0x7f0000000500), 0x24, 0x0)

06:39:55 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1224.830847][T12176] overlayfs: unrecognized mount option "upberdir=./file0" or missing value
06:39:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7], 0x2}}, 0x0)

06:39:55 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5421, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:55 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/127, 0x7f}], 0x5, &(0x7f0000001940)=[@fadd={0xfffffffffffffdc1, 0x114, 0x6, {{0x9, 0x78b}, &(0x7f0000000200)=0x80, &(0x7f00000003c0)=0x612, 0x3c988961, 0xff, 0x9914, 0x7, 0x35, 0x4}}, @cswp={0xffffffffffffff29, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000000600)=0x2, &(0x7f0000000640)=0xffffffff, 0x7, 0xffffffff, 0x20, 0x200, 0x10, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0xfffffe01}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {&(0x7f00000033c0)=""/179, 0xb3}, &(0x7f0000001900)=[{&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/132, 0x84}], 0x3, 0x10}}], 0x110, 0x2c000000}, 0x2004c04d)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$ceph(&(0x7f0000001ac0)='ceph\x00', &(0x7f0000001b00)='./file1\x00', 0x8001, 0xa, &(0x7f0000003200)=[{&(0x7f0000001b40)="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", 0x1000, 0x4}, {&(0x7f0000002b40)="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", 0xfd, 0x7ff}, {&(0x7f0000002c40)="1066ab1498e9f94dbbf79ce8f0c15d0c0a2e7f70dd2042da3cf35346f94c0109a9474d03f6a7b40c85603d8aa7f6f8ab615aefa18621fac30310b9307ba6fd2bbcfbc2115016721db413f7725e159f1c62b8b1a505408a560c9e8fdae887cc610f8beeac0f68e9f25cf8c80169dbcbb1c41108024ac54d8dca2a8dc1d5407d9b522b840e0542a59016cec1b8fb93e8ceef6501acbc9684afaf4b373af003dfe106c505db70d1e08fef39e2a640e7f099a65a2d1f978abdb5d987383d063e02edba79ef8e5cb7d5f507edbf984392c47f24f1428671c590c06ac3a46492c5d4f1ec3d754842c7ed6bec4f42", 0xeb}, {&(0x7f0000002d40)="21a20c274eadfad4c3c02230e6de8b79b1706af8a42ee20bcdc8e0325fed3b85977c44ca0d0fdfe72ddfcbfa03a70ff9472d3b3f95d7d2e4c2b10c", 0x3b, 0x5}, {&(0x7f0000002d80)="56d6d0fcbc96dd7470f8ab8eaa187c5664438fbf89a10c88b247368b60d5d65cb235e4801b4b5d5fc4c1843fea9a2a461c3af96233590566450c5596ed4335b73a7c048c8c1dd6609433996400e977239818c78aa253b78b6cd20af175c518c11d47128e1a9122a945a864e00684c7415a3c22a3040f989b56cb3b27aea46b2d38c21e0b04750e925bf0e8984e9c001bc9e1e09521186de3dcc8f0207da83978356486e0b6cde1db1132d57cdab1324f91075db65a6d16602f31debc0c427e153942b97e1ebf4ef9bb067a5621af8dc1cf9a1f087f", 0xd5, 0x40}, {&(0x7f0000002e80)="fa16aa743219e9b17733024105e8b3812b43a7f6ae0dd55834af80ce79141bd186e26b262ffbc7ae7bfed1f8d221edd87808cd5ab3970e798890b6b50511e076b5bcb512b3d34f92562041933346f10ce96f46ac839f78b7334d2022ce8e6e690a07665f153556869fffb24716fede3a472c5fef8989edcaa87d578cdffabef08afd4592dbca9b5c83333269fec6ed37d769d89064c6a2", 0x97, 0x8}, {&(0x7f0000002f40)="99b729cd81e4932e4293e98023232c4bb39c517a9522b57a03cc76786e26a2ada9579e4be1176faac0afd942245963424c02b63ebbdaf59cae7786dc6ef901c4e1dc5deee515b70c0292a806630e13e582111defe71ad2a8b800668fe0aba021b04fcf244b8d4ff990b8285dd6fb3fbf4ec22557ce80693906a849bbc6c6c12ad9f6089d0938b719d179bcc67455bf6651901ac9aa59921b4a0906d9a283a6d65d0e7a852f1c07ae6cd13aabc19c94918a92e61fb45a4095df1d5b3753a0816fcc88882d3a53", 0xc6, 0x1}, {&(0x7f0000003040)="24c9de87b5974546fc36e81a1838abbfd144870562109d032fec4620ca3e1876031b8a123b46ee40d452646ba7e4367b68f55e9bc4948a9ebc117f12ff71c8424223af60c3fd4608", 0x48, 0x34000}, {&(0x7f00000030c0)="8fe9548bf799af4198d92d0bac078aa296217a3663a8a111fe", 0x19, 0x811}, {&(0x7f0000003100)="85cd69102dd021cc85d2da0749a91eb72b07b9bb1c9a2dfed19f36c189ed3e56b10625d61dc793c27fc943eebdb16b99062c237111fd9c0426c71bbc67873b5bbc54611f07e8845aee9b429bdb0b4599a566ee1286e7d9ebf75311cca8d0a6530b63d7b0da9803c1e01dd9c886ebcf4a1f4e258798c36a33fcc572662885a89193e774294757515d78588935f0f7cc2f24e86191babb5517cdc138e5af0e98036c75f7fd9695170aa492f331607e6addf7b7c7fac0a95bf5ce7c14fc00c8f7fc00f3a8a1f7c2c826caaeaee66a8533da37215c89", 0xd4, 0x7}], 0x2110000, &(0x7f0000003300)='lowerdir')
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1224.967558][T12181] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:55 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x12', &(0x7f0000000500), 0x24, 0x0)

06:39:55 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5450, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:55 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7], 0x2}}, 0x0)

06:39:55 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB], 0x3}}, 0x0)

06:39:55 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:55 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5451, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:55 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1225.471911][T12325] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:56 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB], 0x3}}, 0x0)

06:39:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000003c0)=""/55)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
sendmmsg$sock(r2, &(0x7f0000006180)=[{{&(0x7f0000000080)=@ax25={{0x3, @default, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)="21eb40c05d8a0a68be1ec6f635b1f00f978ec5f254ef5f247838fa2aaf5c73f0a42eed3cfa0b3993ddc6bf8e6dde0c90b14127e36d803e8a1756101bd86f48b53fc121412f3b84c0294edc7712fc207ad2901317243982622bf895d667dc01320a7681ca6c8d288a76c9d7425cff9142079d6fb98d4a695040db0399f9ff6534ccfa541c92620d9f8ee7e7ac56418988bf53f91bc74b1d7a6ff3b36e2ef384e32fce4595b7b4ee5847b0b11160dc05ccb585d2067dba2b7cfb647319e366c744664a5acd87b4161584d9105e941ba4dde353b827d5a57290fba4696c58766aa60b94fa", 0xe3}, {&(0x7f0000000440)="faf936bdb87e1be285be434834a9c9dc177ad4b2665f6d27a81a02d1a0eb0973c30d0ec19360f45287d55c5c3156eea86312cd82f34bc39ec21ee0b85a4ac52ef7a8ce96f0263268178f8bd12dbfdc31ccc3801b1c719493b429574403a6acb06ffc3b82ef1747fbe159b3dbc547084bf8ec4864a998cb731c286256eb01b267d55e6e71923a3d56ee881ae462791e7d59d05b1d1de3a634af6cdb0a5f50d76713ef3c0f2623e81e86fdf7362d50e204c9362437787b93ca6bd0e010b0717350810e723c23d8578f843e9e85e51357ef999e66e0", 0xd4}, {&(0x7f0000000540)="58da9c61cd90779970ec8bfb65426bd0aa6087edc23f28499cb017dd7cd611523dbd9ba0ac7982d6848bdd152f7fa08eb400a1ed5827e5a4f366136401215e9ccc7fd2e58af3aa4d40746c50ea65e0e091c3b45b595538780cbd572e2c815d9f668ef65708c9e16ae2df73f29b1d583657aae45032980b965ea1b61b45368be469646695a7224f", 0x87}], 0x3, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x2ee}}], 0x18}}, {{&(0x7f0000000600)=@un=@file={0x1, './file1\x00'}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000680)="0b0e5ade4abc83b4b727493ff1128c4d96689c4196b04793b708215d84571137961bab8bc1b2c461ad03eeccd015f12a464c2bfe9230d4c5bf19785d8c66c4f28401ae8b78b4453d60f327d5aaf6b2ad0707128ab459c28fb5204f52a1807a10673e23101d189ae23ad1871dc202c12c66feff3c6a35de2c8141ded28a573b3ffec5292c52dbc57cee99c740cef3fefbd1c89dad9313982f7032eede99934baec41613823aa2983557b890716578bd6fd0c4044847a7d5", 0xb7}, {&(0x7f0000000740)="27dded8e2142313e8b157943447249102f9f86dd73db185b0875cea0fdb5784ac5bbdf9058d873d4c3516e6927a7aeca51eb2cd541efdc04485dbc812fbe295e82505f8c30ad77ed98c2f214f33b5f764a8acb35258039fe5a1d7d0cda636d11720e6ee8bb5ae3868ecfa9ae40d365e5c8fd8e511b9153b28c401e76dc1ca6b0aa9b7d40122cac356372fa748a87a0846181a884530c572e997afe95dda8944cf5d93c8054211f994150e1a3e1dd73189a6dd0fb50", 0xb5}, {&(0x7f0000000800)="21c945cd8475ed99215e85d5f2fd3c8c21e85bf033d663af92c0d6538d60767741bcf7bdaca68d9f0b3a9050027138f4a1f43d185137b4564646ce3331b28e78349ada153efa02e82f29e15204b8d5132fd4f3a72ec2ec3fde717a9da6ffbe0750de5337dfe41ec293052312ba880a97fc972ace42eb0e9f2f69ae46a4bdda9532601ded3b0d31a2759e2ba04192d942e528ee80358b187e97fa5c1ce35fd9f84a3729810a4b432858b46caba9171b5756907427f12a96061c096d0f9fd69f191273380e14d67b873585c4a97cb97a43476556dace9ab3ec9c72be1cf66b647bd6f091d977cf7c3ca833945b3b5e1bb10ce436824994d0dd8be6ecc9cdeb8abbdbd800283699e594751fc5e132e7f1d810e37c0a2e3278db66f27476ff384a678ab4192fb5f3f0db0c1e279b4612612502b9713cfb0d99b475b53043fe0a784a7f554d00a7075704a8e8c6484399f1b18951b374f779cc8906f12ca27e6ab6d54f9a0ad2d4af04cb1169c8b6dda5c4e733a2b919b4ce7ee50361f9220e8c51a84590aac3feb21efc7ec9fcfaf568d3ed176d02b62293c5c213da17e8101257de8b2ccfc4aa3541405c84897d5e149e650ec47b6ef3535b73c8df92df86c17323cc253172dd69755bc1fc99c5e812ab636b80dd60b5c2a0cc72615b059959bdc2a004e68699f7f9353cfbfeefc96e58fc3dc8058415d645c6c67369badb755c75cf8af110e5b7a643ecf9cea723b171188a848641fc9c7fad910370e073869a7e192f595826d4e22277e43386a2ac6eaeda8528a3b75677515db4a37aa79d40fb9f014e4ee48f598f8eb13585641da4ba9a60f92fdd1a1ff17178e3171e711e127bce1e38eae413eee88bc71ea0bbf7d8beaa8a3ea8385f968ce7bc5616541c05a42b5f65bf416e892094b2fc934680f29c82a8fcfab30864434cfd2ead83e10788f18341b1257cf4ecf42d1ba1e62586b37ed4fe8697741fb1d622307c1d1bee4361fb5b521216ee79ebf14d68915970baf7f4735deb09a5c56f433d82c2a8dec3886e196de665156a9e029c98739ba3eb8f841c11b17690309918e14fa366a33467490fd059ff9d7b331f12d2f7ccb30544b2e23b7cbdc34c5a096d7ec3cb848cc2939a177723b43356aded99eec9e2e36f0a27f3d9c17e9436012af20727449e6b5e9f7333922085f110dfd9c24f4ddfd58398e3b46de4757b7b0370eed87f929b8930c9c3af9410375a16ff0f4a2ef6f7d84d6a63c07ae05c01c657ea22828cd8da403199136bb4b382036877791fbe16675b7359f5e33f51d7b0060c91ff48ea83500352b7b04d0a9440c79e356a583c667aba7daf82e61897ac8558bc7521bd50a8ae8a6385887a8cffd540054f90fd7aaf29d1f81a50730d00d9ba399e0164bbf2257be8886fc26a38a655b0bf4cc63f91ad32a978f0818712afef5127cfbb532f5152f2d215b91677f6ed097567afd53d632cccc77c0d13a5d4451a99d937b78f4cb1d77ebfe51ff1802a2736056923485db84396158e5c474757b069e6caf5a31fec0ffe7a9325ca984a04650da3f07475b8fa5993eeabec5436381ed7d1e6694f89f85ade44229eb5e207620418dd85cc487141988117cd9d9a8d635e4f4fff224d86375e14e3a473c698fc07b57c9296a9eb7020582e2aa1a87219200d654cebcce8849574d63ccdaac62c60421a606a224329293121b3b2e5b1b0397775515ecd6b970dad3737677d307b1fabfcf9e00d21ef6d45d0a354f246aa7bf0633af0985a18ae026fa04659acd621aa61b5a62de02bd46cf017bc885c39b1cf07f0b62927956d1d9d28f9d47604a5a3b9d9c7c672a3a937e9939411dc4cd6620a284f7a1b46b26e5a7b372db6d591cdaa157a56569dee0323a2b42808eabf7383912fc2ceae35172bf4bae3fa9cf86be70655957d3f979374756dfeee38cd56b3c0cd7556768cb2007de321ea3e6389b321e50d4c44b4e8b2a1628066942597b3f5fdf0fca497456fb1bc667d71d2687742d8e4cc1b6d5f3ed5ac9a0a37686655efc529c97062313708edf0f552eea4a6480158b15dff1078472ba62a59c8e972e4241ab65460844721c3fc14a7a711c5e0b41e474cf40e748f2289ffbd53faeb2e93f479d5a2f048381acd1105c0e24cd693e67b996a86b376acd759f5c1a4fa64075dde2d3569adb7b5f1f2b5761749c26d66ab0dae05c92380b54997c2f64c67642a4cfa1d3637bfd49a616d4a511234f948946bb9bf6e343571cbb73a4cc0cf9062dec65f583bcaf765e854b1fe0430c3d83bbe30bc2adae30c0aca574b9a3859476892f9ae0a6b62767356e8a29317ed9a3cd3839f58d4c3fdbac3751a18ffd3bd8c0c29d3da32cb89b76bfe49df11ad40861233f38db6096dd0633bc80b962fe7e246ae932ad620b00017db58dacaa8c0825d5e0e1d8b3e250fcc23d50df6d2f9b38fa222af2d2933082e72a56f3f2c955b4ed67852e5bb515f72f6f710e72d3a56a660d7b3e755ba860672cf8c82d87e659a2dd11aeae08de63213262f37a27b6a110e41c280217303b937dc0565864b86075e571c5f9d66a22b2deb68a88fd8fdb8bae53c31a0b1316942bff02c758519b940edd98bb11a44dc5ead8b02cc5460426e2960b58ee247ed619b0166fd718eb2324f6ff852549f9924b8efbb59eb6da8dccde523af5911b06d102561ffcbea11cae3419f7d3ec34ab9f3cbe39108e0ee42de1b900279d34b901f2f93562a5a7a0f4d768e5bd47476df81da0fd37befbc2a5ee748990309c8cf22ce602bac267ad9230898d50ee8cd6e8f19a840fe360f105f8c00ac28637256d7f7f3031f3d677854c312ae90c72ec5259b6d2f293af29446290e4b38c232db6e3ae9cbf955c3069eac5f8260f2ee6cc7be51aca2eec7cb65d908dad5e0d5d7b96f319053d96a228688ee274bcccca3aac0297f3da0e78ba678e05cb20d4a3df2cb1dc7d725f1c72e745ebb9f6e84632eee8321ee5bbba98925f459c22004bfaa831ee848edcbc8229f0d8de7d809915bff09c4db9fc41bdf0725ea450a15b16e7b5c2104f81caea6f066d9f9f0d4a6ba788a8b4bc6084801a21539deac0d9bcb27c52b25739aaeb1135101ce310d9751efc0f634f0b9d34b176df444292575e4b19ee70f3a1f795438ca54a3ce6014695b28a8933f2028e38e6a0f4865d17001a606427cd2baaf69344ffe67ebd98d6fd7cab08f2b673b52868f9b65fcc678a53649aeb63c6de622fc327b1b9cfefae60469d0ae3f04563074cc0f8278cd46479267122fff4dd5e8f1172deaa204aae4af412a43e37c8cd1b4b2222f793e7113e9ecbfdb8c775fdd8b3431bb2504424edaf9571d7e85c87b16ca1941a6e154efb1c6018689898cc473068240f5332befe1269a535afc0c8ba2c08091a10fe597c086544be3fd1b383fa58b8c7137011a160b351fbdb301ead791170a62339397e6ed0fa50506f6218d54307dbb0abb27cef41a8c68e2c30f66a13349bb92a899b7ec3284e62309434469c293de4dde649f0b8955b717ec5e78e82465533b713acb5af493a509036a830ba9d2931ec43ce5380e236b1499caf936c9d1b27cf8bd022df40b0a3bb4b1e1e26410dcdb4752b40ac59d7266cccd6a953684e46b20c9472f16f72919275ec849daf850e65c5fefd265483e10ad62e99e40915df8dba1d8b36068aa5cd050e36243ea5e3f640d811916f9cd21bd89ecd76df3ee00727c37a5f2ade1842374da982a0b3012a912415d68f04e54ee65cc4edc6215ccec9a20717a74be7c82957ac90b4d5d44baa5c040c3f5326fa494189b5798d7ae2acd38dee25a1184e276499230868fc662811a08dc6b60af901c16e61650827bb43e46b73d07573104621df3880c524deea8a27bc7d148020311682eaecda98fbb59c1c10f827166bdddc551e11539faf5e9c457a6bb9bed0ba67fbcea55e02fe9ec02105d82bd1ac5ac1bfb05fadf4acde77ef861e5c5de87cb1fd5268d3552bff8f09c19ffbcebba0598be3904e4f8d57cf2f0c3561852fdb5c9d7923fc9c0e80366314f3703ed79e2b1e7052b6aea67b26c88428cd0e6ae57e07fc73fb0d6e49b562fcf5267b443b9bc67f209f1e8e776e6085432b137b59841ea1aa2d9775a3c7a538c683d243ddf7dfa387e67c0b19cdb4bb45ef04a4e37479cf9858ccf58a392801b506c924c30c849577d9d19fd04c68ffc61e0d900f84063d4d768e3b613481c8f65f4ed73032298270c83ad6a9565e10a970464bca7229e84291c37e4af2ef7c7aacf643a42b6f4bb1f05aaaad264f7e1cd357350956edd5c4348cd92dcd7d3fcabc2910f99fab039a55f9b56b8e01c9cc664812a2b4d4f44c08d88e384d4b07c4808ce22cb35e26804da14b65f047af1d116a94a32edbd248d405532a1d7e683685f1bbc80c073aa265e8efccd3b7455bb4c9cb873187bb9b8a863a86ae060944dc784978f3a448fa41bf72998a51bcc42b93482ad4ff2ebd67512b22fa6fd007d4cd9967de11ce36a8836d7490fdf9ccb78eb86267dbd8c95764262894f3cb45fbac19b31998a8658c4f0dcd9bca97ae971291b3807353d457e0f9635aab83ddde5034eda906a6f04e911f6f770b00cddbae2534051fefb3cd96f478b07df55c91487f936712eebe26ed6dda4eff2ecf91973f853de0e8d93ce2f77e2b04752f25217e99a279f63eb0aaa4face5b33e5d5b52ad267f1100bc2014da9c6f1e24f4f769e3471fd55b970d7b3085009c82c54b0be08afae4af1194956e782113fc6337d4861084ced25e88363ff7f87ea11e566bc23c3caac98a55487affdd99f613d51148d36e1d769802754b26624145592c4f50b76460d1c5f6dbf01a34bf1b892e73391a6c89f7d0cf4a8fa41f695318d0498e6055745cad2b71393d7b5e179fb9f2cd380d83e9f77fdef5ce1292c8844568187cb161ca372fa88b32088cfbe19db4e3d7a0f93f2f2e65857c3effebef159a9c90c5ab0d487b444d704bfd194a02f7c2d03b897d62fd8a0c23d7bb3d461462be40d36bb377b1c67970240b42588c66a3c19c358b2aaccc333d72ada832cc520f2afdfb76cccec0be97c97419334bce56d0bea61d83698ba93f7d7ab62858b41106e5a4ff77cef12a5e7cc8465129854d967fb504b4bb3f67d27002e131d68869f4ede0121b2c1a1316cbf52964b06504bcec76502926ab005a1b7a5f5b94ff3d9523b3de0320e5fa1fd7df8a4d284e1a8699cd65acd9ad3af4942690313279a626d89016382502eb668ba2d2b2348cca4fd3009aba3b283e74b1d019633b7165e6b3c63b915a2748d52ea6df9009dcf752c04005e52f5941314ed5ceb5161f6233ca8bd0b441e1942c793e7c37c8ac187eaca915967e538d5c50e8c99235891d408ec71ef4a55f145b5f8b1af807af9358cb5ac477678da036199ef4b382a79fabf6da7b0a394301def6b08a8e361b2da0946c0060ddc4b72f48d652d3169e0fa7cfbae3f6f3b116b01fd343caaf51ea8235d0866d4dac961a5068c160c521d92ca50c48d2e33322181ac2f53349c022909451cc1cc57bc7f8c90a5384b65e8b84ceec32713d00486f793f6f57c478465c6b7f4aeb7e506afbbb59a4d55908d9156a48defa4147255c089089c805b9892af5aaef9f6f64fae4e42cc1291ef6c906fa9d8aef02b5271c0ea8e3ef758445d4042a5f3d06a64eab1774000bdf5a935cb39206fbc0207376f0695efc284f3acebcc25ba0fed185b396cc574c81560c6ef208564107b89008bb6787838403c12ac377be9ed29b", 0x1000}, {&(0x7f0000001800)="270f6060202b45b99591f320f3c0a9c215809268657f3fa43509aa6fbfc03fdde19fa029d2abf24ba2b47ca42b35032c612154cad86f4a314c1de081ffd4ed6c5c19572c6d92beeee9483734c71cbb2593c14ec769e276623136f59e177094c5c3f5c18559ea208c0a1d9adc8412906ce23d9e530c2f4a2bec709cfce63fc5e92f67c70bd67f2c016af719dda9afe7c302abcd5ba79e58ca6ffd9a3aa91a965fe9c160506fae770b07c51bb9827ac5da0e90718f22b3b57d4bc6b09b031042976d0378eeb21a6988e22d7f2300c6258aa2c2285afae02d29193edfa8fb15079c809b9176ce76125ed3fa81a3ea", 0xed}, {&(0x7f0000001900)="687f8bd94ba6e06e8dc29269462c42d9d5cbc3f5eae975f1ff0819c61b715bcdcdb8193c5873ec85be7ac14c61240e7e91ca97b2ca994acb75ea4b8b04eb3a7e5a19674c4150579c613833cf318885ebf6f356dde719", 0x56}, {&(0x7f0000001980)="40c33f955b337987542107c0c55d18b260b0c5d4fe365a1a4644f56714d950dd3b6f38a0f6674450512bdcb2f97f8c8d6afb5f94b35a67bfb5533d62b4fe050ee3644d13975e982df91619f658b5fd87", 0x50}, {&(0x7f0000001a00)="73c3004f856370ef34d344641342e0ce5cc23558541c0b20730042c9d7248b96807b44cf2d9347d01ba681a2b0bc03b1e372898106c4c8f1350f85e8d2ceacd08dfc817f2e771b30330f4b7508137f27ce581d972649a14afff96bbd4e7269e69dcf1c3d17919e82a252a07df97dc54790623beabcc441473bbfed9f503c0fc015c689d0cdd99773d0b5277e8cba3be1c0d71477dd8ef2e6ed99550d2716e91c10b88106d5a79abe58b0435ff3a23feb603a43ed737a77599f12dd75d0ef135e6cbc485b89", 0xc5}, {&(0x7f0000001b00)="33057ff2aaa680a3857dc04bdbacafa975a7b90f5988ab2ff9dfd349e4f07afd87a54521410a0e269597e0bb88137f2cadade64a22ef6464220104bbb2842684abb4", 0x42}], 0x8, &(0x7f00000003c0)}}, {{&(0x7f0000001c00)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="dad2aa35759b09e0f83ff087f84e15a2640b938c4ce672000fa811e8260dcce754ff65d26d134cb8eaf0a9", 0x2b}, {&(0x7f0000001cc0)="ced09e706110f0dfebab557f75bf842afcd3c2cf8cdaba72a34d294264b70759869910f877047383692bec6062a92bce8920c03558cfec43aa18c858d2faa8ed35b3f362a447cfcdd06010863b502b92f6339254fdde40bc6b6237f6c77395126e04c15d00f72807a8b9d453210eea866080e564381ed022850b8518a21319b9366f62431403dc7eeab52ecfc88a1513a2240eb61f8b3e6d6cf2e2c893fc5115725e7a43c0732ef9a413af1a335e2d624b3dbc4edf41a65975d940af1a83d6afdff06745aabf368be52ffabf557a8c10d48ce64a09cdf8fef684e10a188902da55c993eeabfb12b00a", 0xe9}, {&(0x7f0000001dc0)="a635d84a79f2545e8a1f1ab6e2d295c20378a7dc600a4a08fe6be050779acc824f4289b200e7c6f7255f98c924b11e1880c544e89bec089613f0eefc5371a9eb77bd0b2464a70c103a40db970e00ab67a531d7be15593b67b7fb80a8475bfc3be154016db626e903e78d199d7aa1ed0c07ba7fa3ae2666a2a073e7543c93318f145f9adeb3b904bac9bd469a718e56a3705e257c24e3233705b6184de8cd9be8538cd0ddfa7eaa2130b454198daacaf4589958eeab16f5c3dd9e17f8a94db3b9dc0ad9e008584c1398cd9a45e2c024679c3933d4fd0a956c913e34489961397af307f65027389079222090259e44", 0xee}], 0x3, &(0x7f0000001f00)=[@mark={{0x14, 0x1, 0x24, 0xee7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xd20}}, @timestamping={{0x14, 0x1, 0x25, 0x36e6}}, @txtime={{0x18, 0x1, 0x3d, 0x3f}}], 0x78}}, {{&(0x7f0000001f80)=@ipx={0x4, 0x3ff, 0x5, "b7f7ee498ecf", 0x7f}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002000)="7a3dc4a457d531944d0114d6181375beb2cb888bf7dd4cb19a73700b21c6c8b39f9d87274d981ea9bd50cc3fa4a66959a139250ecd61314ca5979a3ecf3d54974b13d86c0548cf2162cc8ce57b7671f5f37c5be68ba166d595461bb82178c3b17bbf3c40afc65eefb94d9b2cae9de5197b07f1f9c366b0256ee3fc7a0591eee14f68ff8225799e300545842c4e213d6af3a11d", 0x93}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="c8cfa090d2bb34c838c6b6ab9ef1708ed2c9b10970d0967ee4cdbcac829dc49d4328faa89efe5fdff1f86b759b3459dbb01f189f059bbbf5d80b80c6816b4b1eeceb438b96e29dc5054053ff9d5ac0dc462dfa5e55e0cdb53f185388aadab03a3f39131ab35c0384e4e763ed0cfbdd6076", 0x71}, {&(0x7f0000003140)="2d574387a2db11b12b97b2cd", 0xc}, {&(0x7f0000003180)="7f5629b0256dc123c418278d15dfa3db6e27663a78de95d0244ead656bfe3224f3279612aca455aac72e6804fc0c40909ab7c31aa64d0f2f1a5557d003ebfd292216fcfedddeffd01239b38260ab4fcff701d282834c7430da2cc943565b6f2ff547522b8edcbe262feed87822997cfbc2955234f33a67fa343a91e4cb0feb39359bd03e22ef81c703101742ff445de2b15b862e141de32622c121e07d25ab82c05068525b50254736fe3f515ca42b84044deef1c2fe2ec6f05a25b0551a5ce638985fcf59dddb09de7ddbe749e1e53beb6457a8755c7a2dea79127bcd02021521b37d196a7ee35724300187488804d369632c", 0xf3}, {&(0x7f0000003280)="a75ae3ee903bb114ce42d8696abc1ad3623b44a5a86880833ff2b721248ddae3267b20cbc30e4ac51ad1d484db92d083fac0272cbf164be1265bbe700fdd8807eec5ef1349b96f36a5c589be0e44c6e9aea005f14e700a1214da60ad7200c69d7d6d3636a082c4ec1a873ba064286cc30837b625e66066ceb73e68abb486ffbb4fde86d29238524d44a3c0d0ab214e35c189ef4aeac3deda07692fe213d678b292a65a9a11c78ece0b97e1582c49721f039b0df76934e0aa27476f857db5664841c75aaf11242c97078a54c4ae055917dae9a7fc84ee9f42c2437a3d25dcaa7ca0c5a578724daf1982750da6991fe1", 0xef}, {&(0x7f0000003380)="ccdbe9a14d97b30c86f249fbfe383b90d9c2f49fcb7183ad7167c30c5b605b1df517486beb", 0x25}, {&(0x7f00000033c0)="4874246094255429bdb0f1c6546bc6cb899abfe9931a3726197a8b9f5477bf7827b45291d2e9d7826a02dcf95685f5410f1a7493c16f6bdbd2eaf0a92f1c26b1f3e00295e7a1fa5fcc9ca31b0827059330895d976e87c141855ec4b56267c888aea2dbdc0701942c86638a525f", 0x6d}, {&(0x7f0000003440)="65febe602b5566170cefd78f4492dddf5b83eb516e5e65dbde471bedaedb0429802be0f0b57782a4df0e1c7173dd9d0398b3dab095e64fddc7d63bc09050d91d8fc1b10c92246e71b5332733bea993ca1fa7f9a240c1120e2339e050fd8a7cf8de4b7b48cb2c43a3d5bdbb71910dfb33d094d5ad3dc46336e6edbc67c6f91a735dee45a54c247f718f18135144f6f587fa6058860a89274c771ac89e8647b86505a8437e3e6f2f32a79897", 0xab}, {&(0x7f0000003500)="a7b22fe04334460e4821a02bf659a1578de12ba4cebd10b540fbb36c8a24825b585ea53c84dc8369ca4eca6226a2befe5fff1b5e9d1d6949dd", 0x39}], 0xa, &(0x7f0000003600)=[@mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003680)="3485f4b01b75dc4668191b552a56a946c5e958679e69c7b13a1dff6acd2db725ffc2b664d6f22ca78e32e5b9da7f91e05e8e64d9a3fddc46749d1e0502ae37a28e478e42c84348b0c8e102f544486b7980034d539acac847d8024a01590dfcbe2a04f3acdbf121f3fb5ed29d3de6854a409da4dd8bfddd47cc4060712d50229d11ee4189f9dba3abed8eebd921a03d40e94b804a4ca965b29ee473cf48fc0967e0498a32a22b84edfade35d4ab19e647542aafb558c80024715a3315fd89cd43f0556413d375a0ccf54b461abea70c55960508c9c668", 0xd6}, {&(0x7f0000003780)="de86bf6613cd1173ea6ba77340bf3242bd729aeff73a598f6512a258743eab52b1bb1c5d97e8c1853af461505f1b079537842cbe353fd05b29c704cb90", 0x3d}, {&(0x7f00000037c0)="d4f5ed401a00d962ec9b4b48a0feaf52357ccb077149bf4d0556e6ee34899b2e4f736b189e35f3482616137c7fdae34708caa4698c00963b81f2f44186a473062ef80fe41bd7b00c5ee2a8d7861c37a63ddd294975fbab9a2f2e74d8bbe2d76a7e02b1ac5a58f827dea03d9066ad722e1b1e27486911b2edeb0bd04baae836cf5cffa00d49d4fcea7c15a0f2454ba674b0f39608284d06f15d41697d1d7450193e820a92678b7854505e7f492d753de9d4901a02b9", 0xb5}], 0x3, &(0x7f00000038c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="cc2ee149fb87b8b439dc7bb604c541665eb9ef54c99c105069e0ccb7f80b416c7716c610aaac637a00e48229479bfd584521c3c52617be07c036cde6cf19c32022c6b4861aa96a9abe5e775cddf96a4eb0ef39f8e73ad5383d1bed41f050fb010b339dcc629cea5a35f123c773b9c139c1ab6d196a2e7076d05ee0a5e38cb3a2674ba9f87e6ff44b1596f1412fb64829e482f071ff7adef962c23de3a3ef777b9703b7804e4b100107e8cdac97f41c4454b11eeb4326715318167b61b60773", 0xbf}, {&(0x7f00000049c0)="3de42a2550a6debd40099f078ce1d1761ff0fbfd4ae56263688de8e778af19090b9364e4dfcab46348beece8329c1496bd6afd3f18acc4f1bd3a0b6a08cf8c2dc013aa43951882a3c8778383325c5373d882cfa98bbb7805e18a0a428feae327cd3b457af9894c9d0cdbeae2ca3e7ff003b85f", 0x73}, {&(0x7f0000004a40)="b02d2782f0521c9234a36faa38b843a9638d7b9e9df422674e31c90bc2c29a0d64fbd3673a456f87496cddf960d75f22c9ee9aa9d7b47777e8b9e0d28b60c64badbe1a589d5d534a60ed2a0ec1d2e709264b026447de41f261", 0x59}, {&(0x7f0000004ac0)="1fb4993fa826c16193557cf4a7d441134fdc356c6ea5537f0e09d79c9a46e5b42a5ab737a432da85e296680d2cf255442abccfca103e2c504c73dcc20634f2557a2a452c5ac0e71e3f71b30904485edfbfa2ff74b6c94c7603fc11a1c6b09b251ba9b509dc2780537b3a64c1c01dd502d3be660c31a15345d6014585", 0x7c}, {&(0x7f0000004b40)="be2404eaf977f1c96830313eb65fab3d27db50072f97e6426267bc9391df90720da0f7f027", 0x25}], 0x6, &(0x7f0000004c00)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004c40)="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", 0x1000}], 0x1}}, {{&(0x7f0000005c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e22, 0xfff, @local, 0x4}}}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d00)="0a196f56c6d7a556a01d7b02b128df5fe798a5a2c3bca9e5de0293ed0856c23aac3c44cb1af92be25f9f389d5eb93017ceb7f942549ef76362bd2c4b8150949e22e5bab886e192b87cc3fbd9984a7c98807820b3b11f4f940565b96a1513f439c27821905477285f223e82828ead104986a5bb1136eed090dcbcaffb39296948814527e1ff61d65456ac80ddf8cb14afdb78e29a3d7731493bc8ed520d2fef6e69325aaa453187dbc1955eb9e1629940f6a3ca3ebbc34912127d77428eab6a9dc1", 0xc1}], 0x1, &(0x7f0000005e40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1c}}, @txtime={{0x18}}], 0xa8}}, {{&(0x7f0000005f00)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f80)="0e87c67d3fd8e4a375c9609ba5712ee44947d849bddcf331958b42c2edd8485e8da12dbe875e45b7f805573643810d2ae4d59aeb81ee500ef8", 0x39}, {&(0x7f0000005fc0)="e7b198f74ee3cd2937d0982a61cd1a8d2eb5e53c75b78f2bff030f96756162a73554ae6ad7c4806934c5e057c6a3923e1e0504d5b4704ea5b96735c99b944e71a2ce14a86da84adfe83a29a507d45a7eae4f1cefff5a10be4a2e4f638d93e02104e0f1d35dbaa30a302451a53ad76dda7932fd57d2562508d2d58ef6866fe494ca2611058abf9cfabfe9d5f109083e", 0x8f}], 0x2, &(0x7f00000060c0)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xe48}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xc0}}], 0x9, 0x20040c0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:39:58 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b"], 0xda)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:58 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:39:58 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5452, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:39:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB], 0x3}}, 0x0)

06:39:58 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00"/81], 0x3}}, 0x0)

06:39:58 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b"], 0xda)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:39:58 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5460, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1228.227301][T12371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:39:58 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00"/81], 0x3}}, 0x0)

06:39:58 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1228.646676][T12400] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:01 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x100)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:01 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b"], 0xda)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:01 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5501, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:01 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:01 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00"/81], 0x3}}, 0x0)

06:40:01 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:01 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x147)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:01 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:40:01 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031d"], 0x3}}, 0x0)

06:40:01 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x6364, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:01 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0))
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1231.429584][T12422] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:01 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x147)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_defaultQ', &(0x7f0000000500), 0x24, 0x0)

06:40:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031d"], 0x3}}, 0x0)

06:40:02 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x100)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:02 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x641e, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1231.656040][T12548] overlayfs: missing 'lowerdir'
06:40:02 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x147)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031d"], 0x3}}, 0x0)

06:40:02 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1231.841412][T12628] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:02 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x660c, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:02 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))
mkdir(&(0x7f0000000300)='./file1\x00', 0x2)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:02 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x17d)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a"], 0x3}}, 0x0)

06:40:02 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8912, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:02 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0"], 0x17d)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x147)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a"], 0x3}}, 0x0)

[ 1232.316002][T12702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:02 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x17d)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:02 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x891c, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:02 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:03 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1232.761724][T12735] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:05 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776ff29c2bf2303d2e2f46696c65010075707065726469723d2e2f66696c65302c008274568eda0259e5fd0a4a86fea91741211a049aa100e15941414dbef949"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:05 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a"], 0x3}}, 0x0)

06:40:05 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8933, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:05 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x198)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:05 executing program 4 (fault-call:2 fault-nth:0):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default&', &(0x7f0000000500), 0x24, 0x0)

06:40:05 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44"], 0x3}}, 0x0)

[ 1235.055203][T12769] FAULT_INJECTION: forcing a failure.
[ 1235.055203][T12769] name failslab, interval 1, probability 0, space 0, times 0
[ 1235.122216][T12769] CPU: 1 PID: 12769 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1235.124940][T12774] overlayfs: unrecognized mount option "woòœ+ò0=./File
" or missing value
[ 1235.130073][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1235.130080][T12769] Call Trace:
[ 1235.130102][T12769]  dump_stack+0x1d8/0x2f8
[ 1235.130118][T12769]  should_fail+0x555/0x770
[ 1235.130140][T12769]  __should_failslab+0x11a/0x160
[ 1235.165792][T12769]  ? tomoyo_realpath_from_path+0xdc/0x7c0
[ 1235.171517][T12769]  should_failslab+0x9/0x20
[ 1235.176023][T12769]  __kmalloc+0x7a/0x340
[ 1235.180176][T12769]  ? tomoyo_realpath_from_path+0xca/0x7c0
[ 1235.185899][T12769]  tomoyo_realpath_from_path+0xdc/0x7c0
[ 1235.191464][T12769]  tomoyo_path_number_perm+0x166/0x640
[ 1235.196974][T12769]  ? smack_file_ioctl+0x226/0x2e0
[ 1235.202008][T12769]  ? __fget+0x401/0x510
[ 1235.206180][T12769]  tomoyo_file_ioctl+0x23/0x30
[ 1235.210963][T12769]  security_file_ioctl+0x6d/0xd0
[ 1235.215909][T12769]  __x64_sys_ioctl+0xa3/0x120
[ 1235.220603][T12769]  do_syscall_64+0xf7/0x1c0
[ 1235.225125][T12769]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1235.231022][T12769] RIP: 0033:0x459a59
[ 1235.234924][T12769] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1235.254629][T12769] RSP: 002b:00007f17b45d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1235.263050][T12769] RAX: ffffffffffffffda RBX: 00007f17b45d3c90 RCX: 0000000000459a59
06:40:05 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./bus\x00', 0x6, 0x1)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x400)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,wo1,upperdir=./file0,\x00'/49])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:05 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x198)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1235.271035][T12769] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1235.279012][T12769] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1235.279019][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45d46d4
[ 1235.279024][T12769] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1235.291398][T12769] ERROR: Out of memory at tomoyo_realpath_from_path.
06:40:05 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xab09, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1235.325616][T12881] overlayfs: unrecognized mount option "wo1" or missing value
[ 1235.346029][T12761] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:05 executing program 4 (fault-call:2 fault-nth:1):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:05 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:06 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xae01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1235.534834][T12996] FAULT_INJECTION: forcing a failure.
[ 1235.534834][T12996] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1235.548080][T12996] CPU: 0 PID: 12996 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1235.555888][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1235.565982][T12996] Call Trace:
[ 1235.569285][T12996]  dump_stack+0x1d8/0x2f8
[ 1235.573636][T12996]  should_fail+0x555/0x770
[ 1235.578068][T12996]  should_fail_alloc_page+0x55/0x60
06:40:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44"], 0x3}}, 0x0)

06:40:06 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x198)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1235.583306][T12996]  prepare_alloc_pages+0x283/0x460
[ 1235.588437][T12996]  __alloc_pages_nodemask+0xb2/0x5d0
[ 1235.593744][T12996]  kmem_getpages+0x4d/0xa00
[ 1235.598248][T12996]  cache_grow_begin+0x7e/0x2c0
[ 1235.603001][T12996]  cache_alloc_refill+0x311/0x3f0
[ 1235.608026][T12996]  ? check_preemption_disabled+0xb7/0x2a0
[ 1235.613778][T12996]  __kmalloc+0x318/0x340
[ 1235.618014][T12996]  ? tomoyo_realpath_from_path+0xdc/0x7c0
[ 1235.623739][T12996]  tomoyo_realpath_from_path+0xdc/0x7c0
[ 1235.629294][T12996]  tomoyo_path_number_perm+0x166/0x640
[ 1235.634765][T12996]  ? smack_file_ioctl+0x226/0x2e0
[ 1235.634776][T12996]  ? __fget+0x401/0x510
[ 1235.634791][T12996]  tomoyo_file_ioctl+0x23/0x30
[ 1235.634803][T12996]  security_file_ioctl+0x6d/0xd0
[ 1235.634818][T12996]  __x64_sys_ioctl+0xa3/0x120
[ 1235.658303][T12996]  do_syscall_64+0xf7/0x1c0
[ 1235.662812][T12996]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1235.668693][T12996] RIP: 0033:0x459a59
[ 1235.668705][T12996] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1235.668710][T12996] RSP: 002b:00007f17b45f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1235.668720][T12996] RAX: ffffffffffffffda RBX: 00007f17b45f4c90 RCX: 0000000000459a59
[ 1235.668727][T12996] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1235.668732][T12996] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1235.668738][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45f56d4
06:40:06 executing program 5:
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x40000)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x5, 0x4)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x4842c0)
fcntl$setlease(r1, 0x400, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r2=>0x0)
ptrace$cont(0x7, r2, 0x4, 0x9)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1235.668744][T12996] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1235.788070][T13010] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:06 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a6)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44"], 0x3}}, 0x0)

06:40:06 executing program 4 (fault-call:2 fault-nth:2):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:06 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:06 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:06 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1236.047600][T13136] FAULT_INJECTION: forcing a failure.
[ 1236.047600][T13136] name failslab, interval 1, probability 0, space 0, times 0
[ 1236.115787][T13136] CPU: 0 PID: 13136 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1236.123633][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1236.133889][T13136] Call Trace:
[ 1236.137196][T13136]  dump_stack+0x1d8/0x2f8
[ 1236.141529][T13136]  should_fail+0x555/0x770
[ 1236.146031][T13136]  __should_failslab+0x11a/0x160
[ 1236.146047][T13136]  ? tomoyo_encode2+0x273/0x5a0
[ 1236.155806][T13136]  should_failslab+0x9/0x20
[ 1236.155820][T13136]  __kmalloc+0x7a/0x340
[ 1236.155836][T13136]  tomoyo_encode2+0x273/0x5a0
[ 1236.155851][T13136]  tomoyo_realpath_from_path+0x769/0x7c0
[ 1236.155869][T13136]  tomoyo_path_number_perm+0x166/0x640
[ 1236.155904][T13136]  ? smack_file_ioctl+0x226/0x2e0
[ 1236.185271][T13136]  ? __fget+0x401/0x510
[ 1236.189430][T13136]  tomoyo_file_ioctl+0x23/0x30
[ 1236.194190][T13136]  security_file_ioctl+0x6d/0xd0
[ 1236.199107][T13136]  __x64_sys_ioctl+0xa3/0x120
[ 1236.203771][T13136]  do_syscall_64+0xf7/0x1c0
[ 1236.208270][T13136]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
06:40:06 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a6)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1236.214149][T13136] RIP: 0033:0x459a59
[ 1236.214165][T13136] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1236.214171][T13136] RSP: 002b:00007f17b45d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1236.214182][T13136] RAX: ffffffffffffffda RBX: 00007f17b45d3c90 RCX: 0000000000459a59
[ 1236.214188][T13136] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
06:40:06 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40045201, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1236.214194][T13136] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1236.214199][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45d46d4
[ 1236.214208][T13136] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1236.249489][T13136] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1236.323109][T13146] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546d"], 0x3}}, 0x0)

06:40:06 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:06 executing program 4 (fault-call:2 fault-nth:3):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:06 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
name_to_handle_at(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000440)={0x1008, 0x2, "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"}, &(0x7f00000000c0), 0x400)
r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0))
ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000001c0))
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f77657264692f623d2e2f66696c65312c75707065726469723d2e2f66696c65302c00e172b413de4ec48257f77731fd45571d9ba91007c8caae6a7a42f13449d8a4535152000000fd9d248d3d2e2440e8333b8410ddff97040c57aa69f890baaa1bd3e44d472290d9c0b602bd58420d23"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], 0x1})

06:40:07 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a6)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:07 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x400454ca, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1236.564534][T13272] FAULT_INJECTION: forcing a failure.
[ 1236.564534][T13272] name failslab, interval 1, probability 0, space 0, times 0
[ 1236.633904][T13272] CPU: 1 PID: 13272 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1236.641752][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1236.651821][T13272] Call Trace:
[ 1236.655128][T13272]  dump_stack+0x1d8/0x2f8
[ 1236.659463][T13272]  should_fail+0x555/0x770
[ 1236.663892][T13272]  __should_failslab+0x11a/0x160
[ 1236.668830][T13272]  should_failslab+0x9/0x20
[ 1236.673332][T13272]  kmem_cache_alloc_node_trace+0x6e/0x2d0
[ 1236.679057][T13272]  ? __kmalloc_node+0x3c/0x60
[ 1236.683733][T13272]  __kmalloc_node+0x3c/0x60
[ 1236.688228][T13272]  kvmalloc_node+0xcc/0x130
[ 1236.692840][T13272]  vhost_dev_ioctl+0xa4e/0x1260
[ 1236.697695][T13272]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1236.703098][T13272]  ? peek_head_len+0x9d0/0x9d0
[ 1236.707871][T13272]  do_vfs_ioctl+0x744/0x1730
[ 1236.712454][T13272]  ? __fget+0x401/0x510
[ 1236.716633][T13272]  ? tomoyo_file_ioctl+0x23/0x30
[ 1236.721566][T13272]  ? security_file_ioctl+0xa1/0xd0
[ 1236.726681][T13272]  __x64_sys_ioctl+0xe3/0x120
[ 1236.731365][T13272]  do_syscall_64+0xf7/0x1c0
[ 1236.735870][T13272]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1236.741753][T13272] RIP: 0033:0x459a59
[ 1236.745643][T13272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1236.765333][T13272] RSP: 002b:00007f17b45f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1236.773744][T13272] RAX: ffffffffffffffda RBX: 00007f17b45f4c90 RCX: 0000000000459a59
06:40:07 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546d"], 0x3}}, 0x0)

06:40:07 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ad)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1236.781714][T13272] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1236.789681][T13272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1236.797650][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45f56d4
[ 1236.808833][T13272] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:40:07 executing program 4 (fault-call:2 fault-nth:4):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:07 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000080)=""/115, &(0x7f0000000140)=0x73)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:07 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40045564, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1236.950117][T13281] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:07 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ad)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:07 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546d"], 0x3}}, 0x0)

[ 1237.041501][T13409] FAULT_INJECTION: forcing a failure.
[ 1237.041501][T13409] name failslab, interval 1, probability 0, space 0, times 0
06:40:07 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1237.156261][T13409] CPU: 0 PID: 13409 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1237.164117][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1237.174205][T13409] Call Trace:
[ 1237.177491][T13409]  dump_stack+0x1d8/0x2f8
[ 1237.181987][T13409]  should_fail+0x555/0x770
[ 1237.186399][T13409]  __should_failslab+0x11a/0x160
[ 1237.191322][T13409]  should_failslab+0x9/0x20
[ 1237.195836][T13409]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1237.201103][T13409]  ? vhost_new_umem_range+0x7d/0x630
[ 1237.207093][T13409]  vhost_new_umem_range+0x7d/0x630
[ 1237.212182][T13409]  ? kasan_kmalloc+0x9/0x10
[ 1237.216662][T13409]  ? __kmalloc_node+0x4d/0x60
[ 1237.221325][T13409]  vhost_dev_ioctl+0xb87/0x1260
[ 1237.226174][T13409]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1237.231450][T13409]  ? peek_head_len+0x9d0/0x9d0
[ 1237.236195][T13409]  do_vfs_ioctl+0x744/0x1730
[ 1237.240763][T13409]  ? __fget+0x401/0x510
[ 1237.244918][T13409]  ? tomoyo_file_ioctl+0x23/0x30
[ 1237.249834][T13409]  ? security_file_ioctl+0xa1/0xd0
[ 1237.254924][T13409]  __x64_sys_ioctl+0xe3/0x120
[ 1237.259593][T13409]  do_syscall_64+0xf7/0x1c0
[ 1237.264084][T13409]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1237.269956][T13409] RIP: 0033:0x459a59
[ 1237.273852][T13409] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1237.293460][T13409] RSP: 002b:00007f17b45d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1237.301858][T13409] RAX: ffffffffffffffda RBX: 00007f17b45d3c90 RCX: 0000000000459a59
[ 1237.309810][T13409] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1237.317793][T13409] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1237.325891][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45d46d4
[ 1237.333854][T13409] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
06:40:07 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ad)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:07 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf"], 0x3}}, 0x0)

06:40:07 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40045566, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:07 executing program 4 (fault-call:2 fault-nth:5):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:08 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee6"], 0x1b0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1237.540288][T13422] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:08 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf"], 0x3}}, 0x0)

06:40:08 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1237.653304][T13443] FAULT_INJECTION: forcing a failure.
[ 1237.653304][T13443] name failslab, interval 1, probability 0, space 0, times 0
[ 1237.746631][T13443] CPU: 1 PID: 13443 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1237.754477][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1237.754483][T13443] Call Trace:
[ 1237.754507][T13443]  dump_stack+0x1d8/0x2f8
[ 1237.754526][T13443]  should_fail+0x555/0x770
[ 1237.754548][T13443]  __should_failslab+0x11a/0x160
[ 1237.754565][T13443]  should_failslab+0x9/0x20
[ 1237.754578][T13443]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1237.754588][T13443]  ? vhost_new_umem_range+0x7d/0x630
[ 1237.754604][T13443]  vhost_new_umem_range+0x7d/0x630
[ 1237.801709][T13443]  ? kasan_kmalloc+0x9/0x10
[ 1237.806213][T13443]  ? __kmalloc_node+0x4d/0x60
[ 1237.810897][T13443]  vhost_dev_ioctl+0xb87/0x1260
[ 1237.816012][T13443]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1237.822338][T13443]  ? peek_head_len+0x9d0/0x9d0
[ 1237.827118][T13443]  do_vfs_ioctl+0x744/0x1730
[ 1237.831700][T13443]  ? __fget+0x401/0x510
[ 1237.835853][T13443]  ? tomoyo_file_ioctl+0x23/0x30
[ 1237.840812][T13443]  ? security_file_ioctl+0xa1/0xd0
[ 1237.845931][T13443]  __x64_sys_ioctl+0xe3/0x120
[ 1237.850614][T13443]  do_syscall_64+0xf7/0x1c0
[ 1237.855245][T13443]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1237.861117][T13443] RIP: 0033:0x459a59
[ 1237.864994][T13443] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1237.865000][T13443] RSP: 002b:00007f17b45d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1237.865011][T13443] RAX: ffffffffffffffda RBX: 00007f17b45d3c90 RCX: 0000000000459a59
[ 1237.865017][T13443] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1237.865023][T13443] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1237.865030][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45d46d4
[ 1237.865035][T13443] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1238.032275][T13454] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:10 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x101000, 0x0)
recvfrom$rose(0xffffffffffffffff, &(0x7f00000002c0)=""/141, 0x8d, 0x2041, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x5, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0xe, 0x1b, 0x14, 0x15, 0x1, 0x10001, 0x1, 0x5, 0xffffffffffffffff})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, &(0x7f00000001c0)=0x14)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1088400, &(0x7f0000000080)={[{@index_off='index=off'}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:10 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee6"], 0x1b0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:10 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40049409, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:10 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf"], 0x3}}, 0x0)

06:40:10 executing program 4 (fault-call:2 fault-nth:6):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:10 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1240.168751][T13485] FAULT_INJECTION: forcing a failure.
[ 1240.168751][T13485] name failslab, interval 1, probability 0, space 0, times 0
[ 1240.219493][T13485] CPU: 0 PID: 13485 Comm: syz-executor.4 Not tainted 5.4.0-rc3 #0
[ 1240.227339][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1240.237398][T13485] Call Trace:
[ 1240.240700][T13485]  dump_stack+0x1d8/0x2f8
[ 1240.245040][T13485]  should_fail+0x555/0x770
[ 1240.249481][T13485]  __should_failslab+0x11a/0x160
[ 1240.254449][T13485]  should_failslab+0x9/0x20
[ 1240.258961][T13485]  kmem_cache_alloc_trace+0x5d/0x2f0
[ 1240.264247][T13485]  ? vhost_new_umem_range+0x7d/0x630
[ 1240.269556][T13485]  vhost_new_umem_range+0x7d/0x630
[ 1240.274675][T13485]  vhost_dev_ioctl+0xb87/0x1260
[ 1240.279540][T13485]  vhost_vsock_dev_ioctl+0x137/0xbc0
[ 1240.284823][T13485]  ? peek_head_len+0x9d0/0x9d0
[ 1240.284838][T13485]  do_vfs_ioctl+0x744/0x1730
[ 1240.284852][T13485]  ? __fget+0x401/0x510
[ 1240.294198][T13485]  ? tomoyo_file_ioctl+0x23/0x30
[ 1240.294214][T13485]  ? security_file_ioctl+0xa1/0xd0
[ 1240.294227][T13485]  __x64_sys_ioctl+0xe3/0x120
[ 1240.294244][T13485]  do_syscall_64+0xf7/0x1c0
06:40:10 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf31"], 0x3}}, 0x0)

06:40:10 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1)
mount$overlay(0x400000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6e00000003000000000000002c6f726b6469723d2e2f66616c65312c75707065726469723d2e2f6275732f66696c65302c00"])
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b4003000200053582c137153e370900018005005400d1bd", 0x2e}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/34, 0x22}, 0x0)
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

[ 1240.294260][T13485]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1240.294272][T13485] RIP: 0033:0x459a59
[ 1240.327541][T13485] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1240.347139][T13485] RSP: 002b:00007f17b45d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1240.355551][T13485] RAX: ffffffffffffffda RBX: 00007f17b45d3c90 RCX: 0000000000459a59
06:40:10 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1b0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:10 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1240.363536][T13485] RDX: 0000000020001480 RSI: 000000004008af03 RDI: 0000000000000003
[ 1240.363543][T13485] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[ 1240.363548][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f17b45d46d4
[ 1240.363554][T13485] R13: 00000000004c4caf R14: 00000000004d9510 R15: 0000000000000004
[ 1240.390823][T13594] overlayfs: unrecognized mount option "nn" or missing value
[ 1240.409801][T13594] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1240.425391][T13594] openvswitch: netlink: Flow key attr not present in new flow.
06:40:11 executing program 4 (fault-call:2 fault-nth:7):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1240.490215][T13477] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf31"], 0x3}}, 0x0)

06:40:11 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1b2)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:11 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:11 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x3)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r1)
mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='overlay\x00', 0x4000, &(0x7f00000002c0)={[{@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}, {@xino_on='xino=on'}, {@redirect_dir={'redirect_dir', 0x3d, './bus/file0'}}, {@xino_on='xino=on'}, {@xino_off='xino=off'}], [{@fowner_lt={'fowner<'}}, {@obj_role={'obj_role', 0x3d, 'eth1trusted\\\nkeyringppp0!}securityvmnet0!-nodev\'cpuset'}}, {@fowner_lt={'fowner<', r1}}, {@subj_role={'subj_role'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:11 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:11 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af61, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:11 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1b2)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf31"], 0x3}}, 0x0)

06:40:11 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x2, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

[ 1240.981366][T13729] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:11 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008240b, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:11 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cd"], 0x1b2)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:11 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c0053eb0b059b9c650c4b9a8b4e9fdf8b43ea5d3414dcd6a59ed549fec5ccec25f579538d0c985f89e1f4f99b08"])
fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, r0, &(0x7f0000000140)='./file1\x00')
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:11 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:11 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x10, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:11 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

06:40:11 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:11 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:11 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x2402, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:12 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:12 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

[ 1241.488959][T13874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:12 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af02, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:12 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\xff', &(0x7f0000000500), 0x24, 0x0)

06:40:12 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1241.851902][T13918] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:14 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x2)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:40:14 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4c00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:14 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:14 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:14 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\xfe', &(0x7f0000000500), 0x24, 0x0)

06:40:14 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:14 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:40:14 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af60, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:14 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4c01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1244.455118][T13950] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:15 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:15 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

[ 1244.838840][T13983] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:17 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4020940d, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:17 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/20, @ANYRES32, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x74}}, 0x0)

06:40:17 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5421, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:17 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:17 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:17 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
connect$netrom(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9995}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f72c89a2070eb1926bf38272f733f796b6469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c00c4e44916216af9e27c00aeb8d9c06dacd1fbe176f9f7691cbe6465f8cf8fedaea39af182515182a7c2ebbb84eb19d00ba48f8d8a000f03fdaa3ab0"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:17 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

06:40:17 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:17 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4070aea0, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:18 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5450, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1247.491561][T14001] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:18 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:18 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

06:40:18 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5451, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:18 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x800454d2, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:18 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1247.816659][T14037] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x2}}, 0x0)

06:40:20 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
set_thread_area(&(0x7f0000000080)={0x5, 0x0, 0x400, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1})
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:20 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:20 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5452, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:20 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:20 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:20 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x800454d3, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:21 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1250.576210][T14083] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:21 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x5460, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x80086301, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:21 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:21 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:21 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{}, {0x8ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x3, 0x9}, {0x8, 0x8}, 0xdd26, 0x1, 0x7})
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r2 = socket(0xa, 0x2, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x701000, 0x0)
ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f00000003c0)={0x1ff, 0xf9bd, 0x5, 0x7d, 0x3})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r4)
stat(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$bpf(0x0, &(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x6c03}}], [{@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}]})

06:40:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:21 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x6364, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:21 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000280021040000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

[ 1251.049875][T14233] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0045878, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:21 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000280021040000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:21 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8933, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:21 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:21 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0045878, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:21 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1251.476556][T14282] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:24 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xae01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000280021040000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc004ae02, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:24 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@index_off='index=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, 'keyring'}}, {@smackfshat={'smackfshat', 0x3d, 'upperdir'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]})
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r1)
getresgid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
chown(&(0x7f0000000280)='./bus/file0\x00', r1, r2)

06:40:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400000000000000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:24 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xae41, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0189436, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400000000000000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

[ 1254.199832][T14314] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:24 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:24 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf01, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:24 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:24 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc020660b, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:25 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400000000000000", @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

[ 1254.576533][T14362] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:27 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file0\x00', 0xcde204c1af2d8adf)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:27 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0406618, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:27 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x400454ca, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:27 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/18, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/18, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:27 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1257.148808][T14391] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:27 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40045612, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc08c5332, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:27 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:27 executing program 5:
mkdir(&(0x7f00000000c0)='./file1\x00', 0x20376583f09fec74)
mkdir(&(0x7f0000000080)='./bus\x00', 0x10)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696cdc72b5fa"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:27 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:27 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/18, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

[ 1257.395400][T14524] overlayfs: failed to resolve './filÜrµú': -2
06:40:27 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x40049409, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:27 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1257.527354][T14526] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:28 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir2./file1,upperdi\x00=./file0,\x00'])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/19, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:28 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{0x3}}, 0x24, 0x0)

06:40:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/19, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:28 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:28 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x2, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:28 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, r7, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000002800210400"/19, @ANYRES32=r7, @ANYBLOB="0c04000000000000000000000c0001006367726f7570000044000200400002003c0001000000000000000000000000000000000000000000000037c3d3d3fbeb77dfdeb9a3fa00000000000000000000000000000000000000000000000000000000000000000000813befeb55ef803997c836c50e937867031df73b1b3d14168aebf35b2124262a05a4f546c64a763be02a6c09b0d2ba44058b4a546de037bf3121"], 0x3}}, 0x0)

06:40:28 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:28 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af61, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1258.035715][T14676] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:31 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{0x5}}, 0x24, 0x0)

06:40:31 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)

06:40:31 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:31 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62732c776f726b6469723d2e2f66690000000000010001726469723d2e2f6c696c65302c00f5ad579e50301a9529078049833fd3c172270abfe231183b6d644fddd442c1eeb2cb7cb187e2b5a6b106fd5099ed00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000140)=0x6e)

06:40:31 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x3, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:31 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:31 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af02, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1260.762561][T14728] overlayfs: option "workdir=./fi" is useless in a non-upper mount, ignore
[ 1260.789735][T14728] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
06:40:31 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x4, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1260.842046][T14730] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)

06:40:31 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{0x7}}, 0x24, 0x0)

06:40:31 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:31 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x401)
r2 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000002c0)={0x80000, 0x0, [0x5, 0x7, 0x100000001, 0x4, 0x6, 0x1f, 0x6, 0x9]})
getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f72c16469723d2e2f66696c65312c75707065726469723d2e2f66696c65302c00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:31 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:31 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x5, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:31 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af60, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)

06:40:31 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1261.405033][T14879] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:31 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x6, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:31 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4020940d, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:32 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{0x25}}, 0x24, 0x0)

06:40:32 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)

06:40:32 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x7, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1261.868776][T14916] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:34 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:34 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4020ae46, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:34 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)

06:40:34 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x8, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:34 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{0x2651}}, 0x24, 0x0)

06:40:34 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:34 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4070aea0, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1264.329471][T14950] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:34 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x9, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:35 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x2}}, 0x24, 0x0)

06:40:35 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x800454d2, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1264.733294][T14995] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:37 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x1e8, &(0x7f0000000600)=""/186, 0xbe}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000100, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:37 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:37 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xa, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x80086301, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:37 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x5}}, 0x24, 0x0)

06:40:37 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:37 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xb, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1267.398075][T15032] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:37 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af00, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:38 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x7)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000280))
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000200)='./bus/file0\x00', 0x0, 0x0)

06:40:38 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x6}}, 0x24, 0x0)

06:40:38 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:38 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xc, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:38 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x8070ae9f, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:38 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1267.893477][T15165] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:38 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:38 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x8}}, 0x24, 0x0)

06:40:38 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0045878, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:38 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xd, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1268.307199][T15212] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:41 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b080000002e2f66d36e696ce24bed70253165312c75707065726469723d2e2f66696c65302c00"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:41 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:41 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0045878, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:41 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xe, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:41 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:41 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x10, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:41 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0145608, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1270.891008][T15231] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:41 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:41 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x2}}, 0x24, 0x0)

[ 1271.287172][T15278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
sendto$unix(r0, &(0x7f0000000080)="396e25716735987b9a81398979ee80170e2b5e2e8b0b51544488298046a645d540bfb8e3a2bf2f540afef6d0b1ef397b4bae3df2e4e3e19b4ce98f284c54ec6630532a5dda3aeff10385ea15bd77de6eaa2b30658f1d9bd55de7e53c4c0f07429d47440e5e", 0x65, 0x110, &(0x7f00000002c0)=@file={0x3, './bus\x00'}, 0x6e)

06:40:44 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x6}}, 0x24, 0x0)

06:40:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0189436, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:44 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x11, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)=""/213, &(0x7f0000000340)=0xd5)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1273.948148][T15294] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc020660b, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:44 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x12, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:44 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0xc}}, 0x24, 0x0)

06:40:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f77657f0e00000000000075732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f2f9fa3609f690066696c65302c006596675001ed0c8266c04c78179ef4867226884f17fc55a6ef77e6358f9f0a2a22a4ef3a6b4568001ec0ca5129fbfda34810652b22f28870258b997bbea2679c81b00b4ec1c741fffb8e1e79b283b5b70000000000000000"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
open(0x0, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:44 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0xc0445636, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:44 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x25, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:44 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1274.543554][T15456] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:45 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x2, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:45 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x12}}, 0x24, 0x0)

06:40:45 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1274.897866][T15488] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:47 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lstat(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b4003000200053582c137153e370900018005005400d1bd", 0x2e}], 0x1}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
chown(&(0x7f0000000280)='./bus/file0\x00', r1, r3)

06:40:47 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x5c, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:47 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:47 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:47 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x600}}, 0x24, 0x0)

06:40:47 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1277.467783][T15519] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1277.483856][T15519] openvswitch: netlink: Flow key attr not present in new flow.
06:40:48 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x300, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1277.520397][T15510] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:48 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:48 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x2, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:48 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0xc00}}, 0x24, 0x0)

[ 1277.958888][T15555] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:50 executing program 5:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:50 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x3, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:50 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:50 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x500, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:50 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x1200}}, 0x24, 0x0)

06:40:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x600, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1280.508988][T15590] overlayfs: failed to resolve './file1': -2
06:40:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:51 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x4, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1280.620411][T15577] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:51 executing program 5:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x2651}}, 0x24, 0x0)

06:40:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x700, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
close(0xffffffffffffffff)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1280.848248][T15718] overlayfs: failed to resolve './file1': -2
06:40:51 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x5, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1281.020748][T15722] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
accept4$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000001880)=0x14, 0x80000)
sendto$packet(r0, &(0x7f00000002c0)="285d1d1f1ab0ff0863f39557cebf4c349679d5f66a3254ba50c1297caa25c554b768f15f7e4fbb3092dc55ffbd9021bfd4076588bd26a8b8efae1d9b0e4fcda444f3e2fbfbfef2704cc84093f13a8cb5cb599f39856563396f091aa6debf99b6fba1d8ac3aa55022a03eb0555074e59aa97ab50beff482db93b15d7ca4c1f8c4fdd8d0313ae8410e002a895ba1b585867c842bf96ad0f4ed5b5ee072b9b2043f735df484f4dacf27028aa78a197a66d84f292448348f8d42406cff52990824c5c840d40d9f61f86340bab2a7fb6dd6d96b82b7d378fc6ab00cdea5b6ad15e120943a139290fdc4b8479fe0a10091bb497b49ae73", 0xf4, 0x8000, &(0x7f00000018c0)={0x11, 0x7, r2, 0x1, 0x34, 0x6, @remote}, 0x14)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r4)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x174}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0x91}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, [], 0x1e}, @in6=@loopback, 0x4e20, 0xfffe, 0x4e21, 0x6, 0x2, 0x0, 0x80, 0x5e, 0x0, r4}, {0xc3, 0x7, 0x401, 0x55d9, 0x400000000010001, 0x5, 0xb, 0xfffffffffffffff9}, {0x3, 0x7fffffff, 0xa034, 0xe1c1}, 0xfffffffd, 0x6e6bb8, 0x1, 0x1, 0x2, 0x1}, {{@in=@loopback, 0x4d3}, 0xa, @in6=@empty, 0x0, 0x3, 0x1, 0x1f, 0x7, 0x5, 0x10000}}, 0xfffffffffffffddd)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x900, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:51 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x6, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xaa032ae77fd5d26a, &(0x7f0000000140)={[{@nfs_export_off='nfs_export=off'}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
listxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0), 0x0)

06:40:51 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:51 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3f00}}, 0x24, 0x0)

06:40:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xa00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:52 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x7, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002df000/0x3000)=nil, 0x3000})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1281.696412][T16081] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xb00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4000}}, 0x24, 0x0)

06:40:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x8, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:52 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000007c0)='./file0\x00', 0x10)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = msgget(0x1, 0x8)
msgctl$IPC_INFO(r0, 0x3, &(0x7f00000002c0)=""/189)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
msgget$private(0x0, 0xa50)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r3, 0x7e7f, 0x6}, &(0x7f00000003c0)=0xc)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x78c40, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
clone(0x25124100, &(0x7f0000000600)="63f4474a2ebae8ff6c193966b38a2cdd4e7c69807d5674e1f2c3f156245eccd70df91cfa5a4137c291384e1b81c89c7a8d8f991911491e23938ae4d264bec7298ba580fc3d2dea8b07a26a78df705e1bd93cbf662e75590327d257c67092183e9b3bfc39b656246596e32f4db3f93513985de89444233665913ab821d6597bc407fe1cd3e942798c766c451d945ade979ecabe780262717f0b26c521913910f378f72774cb5668190f5e0746493b34419272bc10", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000006c0)="c57f09fb5eb6132c1c6b7d685896bf1b5236456996ee28fa5a08039b6a0dbf4378e3357058bbea2e4d029dd17be56b006bfa8b86f108172e3e6431b6988dda36a6709f39f9ded7598a1cf752bf2148e1dfb861ec0a9c0afca183c9b29fa0aad3912a29abe6cf6e589fa320575e148758f40a70932ae3c86e148925fdf3a74e10ebc10902ec90b0bf8c8ab4")

06:40:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xc00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:52 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newsa={0x15c, 0x10, 0x40d, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @empty}}, {@in6=@loopback, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@lifetime_val={0x24}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x387}}, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xd00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:52 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x9, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1282.216038][T16232] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:52 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:52 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x5126}}, 0x24, 0x0)

06:40:53 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xa, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:53 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f7765726469721d2e2f6275732c776f726b6469723d2e2f66696c65312c756d7065726469723d2e2f66696c65302c002d9d4246b13451f942ca3e1aa19b1308ce3f3cb3a818dedd06e40861eddd220d0f0fc679470ceafa0c62ab4fa23b26ca"])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0))
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080))

06:40:53 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xe00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1282.639624][T16427] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:53 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0)

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

[ 1282.740808][T16504] overlayfs: unrecognized mount option "lowerdir./bus" or missing value
06:40:53 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:53 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xb, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:53 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x1100, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:53 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:53 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
keyctl$session_to_parent(0x12)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="fc3fa4514f861a762991850383dd11cc1b5be5020725673ab8e9c752d9de8e36431756623c1e58da2d27c3a5898bb03222a760179417d31ea04293f96d7f2c295c5c2cc8affbff60d2c95b7b3b2ef408000000c52490e37223e99567a05a44dced9ddeff7680762cfe62f429bf3fc94e8f517dbbe996f0d1d66a7588ee15288c592fa8d9a2601ae8180791628ceccedb7938e94d7852d435dab23b21b692a764c1866dbe9c0f8a0ea4afbd7487f26e42bbf2cb685c9546068e9b364eb5cf8d48c654724b17f0e624236b42cc7fb70110207bd388e91eb86f646b3282e466a61fb41dd2f644ceb250550abc46a96e1e65808f918c8a3390b14782c8367bcf574e42e1043c7a01b339c3547dec155aa925ee859b4c12572a42d5435959b94d80421dc8fdc9b803e158973eb5b9ee8f779994e737e99af331585e691501000000be92f071eabd382e80a4abc12a24626ce2da893c2590ae09ac78a200a5fa9cf290f4df8a7f29184ef31700a03b07fc5bc9043e9b3d3f5650399646dff0d0a04bea7f31442f407485265063d9f11a923e45bbd43d4d915a239cbd1add4e37d35ec6f18e802348dea6a3e374c62da4c87ee659cded"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:53 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xc, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:53 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x1200, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1283.166732][T16583] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:53 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:53 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x0, 0x2}}, 0x24, 0x0)

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:53 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:53 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:53 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xd, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:53 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x2500, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1283.459781][T16659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:56 executing program 5:
fsopen(&(0x7f0000000080)='proc\x00', 0x3)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:56 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:56 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:56 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x0, 0x6}}, 0x24, 0x0)

06:40:56 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0xe, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:56 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x3f00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:56 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:56 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:56 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x4000, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1286.295873][T16718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:56 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@metacopy_on='metacopy=on'}]})
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:56 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x10, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:56 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x0, 0xc}}, 0x24, 0x0)

06:40:57 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:57 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x5c00, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:57 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x11, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1286.613062][T16855] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
06:40:57 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1286.719663][T16855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1286.794394][T16854] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:57 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x0, 0x12}}, 0x24, 0x0)

06:40:57 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:57 executing program 5:
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in6}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000040)='./file0\x00', 0x0, r0)
lchown(&(0x7f0000000200)='./file1\x00', 0xee00, r0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b4003000200053582c137153e370900018005005400d1bd", 0x2e}], 0x1}, 0x0)
accept4(r1, 0x0, &(0x7f00000000c0), 0x181000)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,up./file0,\x00'])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0))
ioctl$RTC_PIE_OFF(r3, 0x7006)

06:40:57 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x12, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:57 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x80000, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1287.054218][T16992] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1287.066654][T16992] openvswitch: netlink: Flow key attr not present in new flow.
[ 1287.076746][T16992] overlayfs: unrecognized mount option "up./file0" or missing value
06:40:57 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:57 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x25, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:57 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
memfd_create(&(0x7f0000000080)='md5sum:vmnet0\x00', 0x1)
acct(&(0x7f00000003c0)='./bus/file0\x00')
prctl$PR_SET_FPEMU(0xa, 0x1)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x200, 0xe2f939dd90afff9e)
sendto$unix(r1, &(0x7f0000000540)="3af27fd2ad22914086d296976ad98b5fea465c22584a41e8fd00cb931149cd3f771edcd209f67719a4c2d73e7b63ce3bc145151a7d83f52d3426fed1abe4d62e187adb2eefb45a8cfdb2590ce6d930ef96afb815fecebae042ff99e0a975985bf3e799bb9733db1a632f1aca70d335e41a69bb335cbae5c64320616ee57a6d09e0905dfad2ed84ed24f87b28f3a48f1cabcbb7bf936bc6a79abfcfa88a229a5e62", 0xa1, 0x20810, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lchown(&(0x7f0000000040)='./file0\x00', 0x0, r3)
r4 = getuid()
alarm(0x5)
mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='fuse\x00', 0x8000, &(0x7f0000000600)=ANY=[@ANYBLOB="66643deedc7ab2ff3f2885939bcd4d96adbfa3acdb966929f923abb4da95f8609f94f4697eb9ffe75f6eef0d5b8f87d10b16fc4095fd96078793680971ee6d7c94ade9820a18587d493a3be5be21107799fde4104e2c8182f7d2e112d25322f3ebb549f880faaf3194d1214f08fb18257f7221d0665de6f3c04712ac6afaa4726dd1ed7f94be40d3617ba1f571000000000000f0e6340e3bf1c25d7f46832d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000020,blksize=0x0000000000000000,allow_other,allow_other,max_read=0x0000000080000000,default_permissions,permit_directio,euid>', @ANYRESDEC=r4, @ANYBLOB=',\x00'])
chown(&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x0)

06:40:57 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x1000000, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

[ 1287.265664][T16999] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1287.420221][T17137] fuse: Bad value for 'fd'
06:40:57 executing program 0:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ntfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x0, 0x600}}, 0x24, 0x0)

06:40:57 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r6 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r5, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r5, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

06:40:58 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x5c, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

06:40:58 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x2000000, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:58 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x401, 0x2, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff86)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacBt.usage_user\r', 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r7 = socket$kcm(0x11, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x2d4, 0x0, 0xfffffffffffffda9}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
socket$kcm(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r6, 0x0, 0x1, 0x0, 0x0}, 0x20)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')

06:40:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000000000000000000520000", @ANYBLOB])

[ 1287.679541][T17136] Process accounting resumed
06:40:58 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x3000000, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0xb3, &(0x7f0000001580)=""/179}]})

06:40:58 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x300, [{0x0, 0x1000, &(0x7f0000000180)=""/4096}, {0x0, 0xb8, &(0x7f0000001300)=""/184}, {0x0, 0x0, 0x0}]})

[ 1287.794615][T17264] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1491.384018][ T1064] INFO: task syz-executor.5:19837 blocked for more than 143 seconds.
[ 1491.392193][ T1064]       Not tainted 5.4.0-rc3 #0
[ 1491.397227][ T1064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1491.405945][ T1064] syz-executor.5  D24680 19837      1 0x80004004
[ 1491.412259][ T1064] Call Trace:
[ 1491.415604][ T1064]  __schedule+0x74b/0xb80
[ 1491.420034][ T1064]  schedule+0x131/0x1e0
[ 1491.424255][ T1064]  schedule_preempt_disabled+0x13/0x20
[ 1491.429707][ T1064]  __mutex_lock_common+0x1411/0x2e20
[ 1491.435044][ T1064]  ? acct_process+0x3af/0x570
[ 1491.439722][ T1064]  mutex_lock_nested+0x1b/0x30
[ 1491.444557][ T1064]  acct_process+0x3af/0x570
[ 1491.449059][ T1064]  do_exit+0x573/0x2190
[ 1491.453191][ T1064]  ? get_signal+0x3aa/0x1d60
[ 1491.458410][ T1064]  do_group_exit+0x15c/0x2b0
[ 1491.463065][ T1064]  get_signal+0x4ac/0x1d60
[ 1491.467775][ T1064]  do_signal+0x37/0x640
[ 1491.471934][ T1064]  ? prepare_exit_to_usermode+0x258/0x580
[ 1491.477963][ T1064]  prepare_exit_to_usermode+0x303/0x580
[ 1491.483507][ T1064]  syscall_return_slowpath+0x113/0x4a0
[ 1491.489193][ T1064]  do_syscall_64+0x11f/0x1c0
[ 1491.493852][ T1064]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1491.499738][ T1064] RIP: 0033:0x4139ea
[ 1491.503614][ T1064] Code: 00 48 89 04 24 48 c7 44 24 08 21 00 00 00 e8 ed 7e 01 00 0f 0b 48 89 1c 24 e8 b2 f9 03 00 48 8b 44 24 10 48 89 44 24 38 48 8b <4c> 24 08 48 89 4c 24 40 e8 69 88 01 00 48 8d 05 f3 a4 4e 00 48 89
[ 1491.523733][ T1064] RSP: 002b:00007ffcbd566058 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 1491.532159][ T1064] RAX: fffffffffffffe00 RBX: 0000000000bfa940 RCX: 00000000004139ea
[ 1491.540180][ T1064] RDX: 0000000040000000 RSI: 00007ffcbd566090 RDI: ffffffffffffffff
[ 1491.548196][ T1064] RBP: 00000000000039b0 R08: 0000000000000001 R09: 0000000000000001
[ 1491.556221][ T1064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011
[ 1491.564223][ T1064] R13: 00007ffcbd566090 R14: 0000000000bfa99b R15: 00007ffcbd5660a0
[ 1491.572217][ T1064] 
[ 1491.572217][ T1064] Showing all locks held in the system:
[ 1491.579987][ T1064] 1 lock held by khungtaskd/1064:
[ 1491.585846][ T1064]  #0: ffffffff888d3f80 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30
[ 1491.594723][ T1064] 1 lock held by rsyslogd/7848:
[ 1491.599559][ T1064]  #0: ffff8880a2fecde0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x243/0x2e0
[ 1491.608296][ T1064] 2 locks held by getty/7938:
[ 1491.612956][ T1064]  #0: ffff88809a98c090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.622212][ T1064]  #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.632091][ T1064] 2 locks held by getty/7939:
[ 1491.636952][ T1064]  #0: ffff8880a58d5090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.646577][ T1064]  #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.656531][ T1064] 2 locks held by getty/7940:
[ 1491.661206][ T1064]  #0: ffff8880a12f7090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.670533][ T1064]  #1: ffffc90005f092e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.680144][ T1064] 2 locks held by getty/7941:
[ 1491.684914][ T1064]  #0: ffff8880a7a88090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.694196][ T1064]  #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.703863][ T1064] 2 locks held by getty/7942:
[ 1491.708522][ T1064]  #0: ffff8880a892b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.718320][ T1064]  #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.727939][ T1064] 2 locks held by getty/7943:
[ 1491.732600][ T1064]  #0: ffff8880a7bb4090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.741852][ T1064]  #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.751635][ T1064] 2 locks held by getty/7944:
[ 1491.756700][ T1064]  #0: ffff8880993fd090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1491.766304][ T1064]  #1: ffffc90005ef12e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00
[ 1491.776788][ T1064] 1 lock held by syz-executor.5/19837:
[ 1491.782232][ T1064]  #0: ffff8880a7dbb0f0 (&acct->lock#2){+.+.}, at: acct_process+0x3af/0x570
[ 1491.791071][ T1064] 3 locks held by syz-executor.5/17136:
[ 1491.796735][ T1064]  #0: ffff8880a7dbb0f0 (&acct->lock#2){+.+.}, at: acct_process+0x3af/0x570
[ 1491.805476][ T1064]  #1: ffff88809b314420 (sb_writers#3){.+.+}, at: do_acct_process+0xf0c/0x1370
[ 1491.814631][ T1064]  #2: ffff888093bd4a48 (&sb->s_type->i_mutex_key#10){++++}, at: ext4_file_write_iter+0x1a8/0x15b0
[ 1491.825375][ T1064] 
[ 1491.827703][ T1064] =============================================
[ 1491.827703][ T1064] 
[ 1491.836149][ T1064] NMI backtrace for cpu 1
[ 1491.840478][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.4.0-rc3 #0
[ 1491.847827][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1491.857878][ T1064] Call Trace:
[ 1491.861268][ T1064]  dump_stack+0x1d8/0x2f8
[ 1491.865581][ T1064]  nmi_cpu_backtrace+0xaf/0x1a0
[ 1491.871518][ T1064]  ? nmi_trigger_cpumask_backtrace+0x16d/0x290
[ 1491.877653][ T1064]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[ 1491.883824][ T1064]  nmi_trigger_cpumask_backtrace+0x174/0x290
[ 1491.889820][ T1064]  arch_trigger_cpumask_backtrace+0x10/0x20
[ 1491.895789][ T1064]  trigger_all_cpu_backtrace+0x17/0x20
[ 1491.901261][ T1064]  watchdog+0xbb9/0xbd0
[ 1491.905422][ T1064]  kthread+0x332/0x350
[ 1491.909951][ T1064]  ? hungtask_pm_notify+0x50/0x50
[ 1491.914954][ T1064]  ? kthread_blkcg+0xe0/0xe0
[ 1491.919525][ T1064]  ret_from_fork+0x24/0x30
[ 1491.924095][ T1064] Sending NMI from CPU 1 to CPUs 0:
[ 1491.929380][    C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10
[ 1491.930965][ T1064] Kernel panic - not syncing: hung_task: blocked tasks
[ 1491.944477][ T1064] CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.4.0-rc3 #0
[ 1491.951845][ T1064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1491.961990][ T1064] Call Trace:
[ 1491.965261][ T1064]  dump_stack+0x1d8/0x2f8
[ 1491.969568][ T1064]  panic+0x264/0x7a9
[ 1491.973453][ T1064]  ? nmi_trigger_cpumask_backtrace+0x21a/0x290
[ 1491.979613][ T1064]  watchdog+0xbcc/0xbd0
[ 1491.983781][ T1064]  kthread+0x332/0x350
[ 1491.987847][ T1064]  ? hungtask_pm_notify+0x50/0x50
[ 1491.992861][ T1064]  ? kthread_blkcg+0xe0/0xe0
[ 1491.997433][ T1064]  ret_from_fork+0x24/0x30
[ 1492.003437][ T1064] Kernel Offset: disabled
[ 1492.007872][ T1064] Rebooting in 86400 seconds..