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", 0x2000, &(0x7f00000007c0)={&(0x7f0000000140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  233.922263] bridge0: port 3(team0) entered disabled state
[  233.922268] delete_channel: no stack
[  233.930703] device team0 entered promiscuous mode
[  233.942437] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  233.951572] device team_slave_0 entered promiscuous mode
[  233.960013] delete_channel: no stack
02:17:14 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000009010200000000000000000000000004000200700002000c000280050001003a00000006000340000000002c0001801400030000000000000000000000ffff0a01010014000400000000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000c746f0bafc0089faddd5ba611fe9fa9257caf5c6f74d8d495137454724527bb460004f4c532d6d8df7658dbfe21f9ec73e55fb74b90c05e6e21461dff67975f02ec4c9a26998eb533f68d1f2393af9c2d5a8fb050d2154c1a9e913a0210d2074e75131a8f8f5b507"], 0x88}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  233.993132] device team_slave_1 entered promiscuous mode
[  234.007968] delete_channel: no stack
[  234.012288] delete_channel: no stack
[  234.031964] bridge0: port 3(team0) entered blocking state
[  234.037713] bridge0: port 3(team0) entered forwarding state
02:17:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x80}, 0x2802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000001280), 0xc80, 0x20c000)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0)

02:17:14 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000009010200000000000000000000000004000200700002000c000280050001003a00000006000340000000002c0001801400030000000000000000000000ffff0a01010014000400000000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000c746f0bafc0089faddd5ba611fe9fa9257caf5c6f74d8d495137454724527bb460004f4c532d6d8df7658dbfe21f9ec73e55fb74b90c05e6e21461dff67975f02ec4c9a26998eb533f68d1f2393af9c2d5a8fb050d2154c1a9e913a0210d2074e75131a8f8f5b507"], 0x88}}, 0x0)
socket$inet(0x2, 0x200000002, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  234.108959] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:14 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100440, 0x0)
connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x6, @local, 'hsr0\x00'}}, 0xe)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
connect$pppoe(r1, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0)

02:17:14 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:14 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={&(0x7f0000000140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:14 executing program 5:
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000340)='j', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000300)='\'', 0x33c00}], 0x300}}], 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="a67b2bfa84c3c4d8fa66ac71ba42efa309be3bbc8273d48b08f52566a587867c4b37e5556b67b370780b4f29ec80895a037007", 0x33}, {&(0x7f0000000200)="f65b06b3a9a28d812f88f0cc5739c0f17dc82fd4cdb363f79191f97fdeba37aae5e447ca9e8ed9b0c58066c90033d4a1f803826c39d9ee69120e612252c9dad2d6ebffed32bb50e4c6f607d16ce29ac76f937368d925770b0957c11d1e83083c50f7dd3c1079765009eda3d5196fdca1fbc8cf19a2d377de480962ea720b2461eb558a0d916fb9dc0ac3ef491e4b6ce1914202d9fa00587e2cd3ea7106915ecbca98db154d55ff09429fb8fa62f793ef6525eb9282fd6af197e6d6d56365f442ee373f6d2d94fb79d8babae80e7fa3c8c186e06ea3a0b6f6cd6e127379b34737dd65408993209c5023baec4b820364", 0xef}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)}}, {{&(0x7f0000000380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="9083c7bffccff70e9159ed40a7e9c60ef661507556d71ff0f6b2e456895846d7d575ec61897829c060c068dc1282d2cdb48b611854a5787bdd41567aef2663281620417060c5a6b3085061a8e707cf2827c518892b4760bde9b6a8b8ac82342fee584f60b9a0921d24e4768786158abcd035d46ccb15fe39532da22c28", 0x7d}, {&(0x7f0000000440)="b0d40243824cb02c72f4a3ba72776185e5e3895a07a72055f432f39b477edb0201eb962ddd529f599fc02c013ea034cd0410ccf0ae76c5198bd41965ea78e02cb0ce15e796e3e46ab6792afcea968daaaf9557d756c40a733d1f29e1cd00000000000000008000000000000000", 0x6d}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}], 0xc0}}, {{&(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000001cc0)="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", 0x154}, {&(0x7f0000000bc0)="9f0735862b82af207ad46f23e62a56a0413997c87a08c0e0a224be2e60ab3e51fd410c5fc09fd9703637f88730d872274a89d874c3e7dfcc78161b18f98d2277803b3a4e37f16a1ae31f7deaf17599d0d1fa7f6311e1c635c60f54188f2c37c7775e2354fdeabfe18dfb5180cc2df9df2c2ab2a373e580f720c7d768105072e1d2b35b0781c165dfa244239db54f09e325ac51532e9aa891ad75e408b5335b85a6acfc1dbeed78697e7c45b97845db14f223d61e5c2e3133e8a3ae6c587299510a81108eaa30979d17bfe1e7055e52e252d2a60d08e86e8f084ac6390e3c701b0660b7325708e6dcc989f6001679b0012c2394affec0148303bf70ed64118f2492026fbe42fae5bff06327a6a75690a9843595e036c1da87773fdee2600553386ea0c3f711405484041c7350976757c8d092fd1303dea817177b78f56e1ea718aa5d12df8b9687b465c93c8af8241bb633531f8520f22bb5f6e668581dd8cb88e4961048afbae3bb8c75ee23607669ebdb7036628865e5990632c9b67c32c953ca235d16bb8062c71b2b2f0c9d472ac45512f3eb21264ead3e9b3ee7522f96ab1cb1e9bd2d02d73ebc04a450d69f9837d72df45b7b8726ce42836b325bde81e0636d819c5ee3ee32649eabae7d915d44dde9db0cdc00a69460f88c7a4830d67cff7612e76539dd43e1f3db151e0c5c078c674e6fd654bc4d2349af0d39fe4340ecdecfeddeee266c8142a5efe2fba999d49bc7bccc840bfd81814764908aa4a517755d8156b0ee0d741b59e85ee0c535149ef6e047c02d8bdaab932dd49755d928b28bad5b9733f1c2ea54b46c2ec631a73cef3eb062f008f7a1ba19f0a5bdbabd69da4b08cf13a58a650a4e8274780cc27c5f8a506f9b85e04aa44ece9ec7672de8cff60262d61cd0febafa8eef5a14dca39821fe9b4cdade3744289abfbeaaff90602bdc8b4032cdbc85305deb0068a69b14fb9ff3379e4e101d337d0d661096fa81f1453b68b4ca9404376055bead0b1611f482dfdb0ffa3c07bbffef7230f738f05ccd41df48d8839541c95214fc2850c941810dcb8ab9c6fb9048799203b388850c5d4ebd3bc96902275214133663c3fc2c1c0f220f0f30affd627c4db41ae42a71ed642123bd63684cc2e26cf777bd82666ac43ff7583b546724cefbcb95ccd04ee82e9cf615d0abaaa7849881fcbc628a6e701b36b032d7b9c6fc52593416fb31399522e06c1f486270814e41f05349110de2568ae569476a54d6ade7ac857471cba4f3a0a2539b3cb5256797f92afbd3d4ab79ed9849f4291936080571ee8323b8854fb1a31bc23c4db575f2fd1f16801e084136193614a3082874e5ffb6e4c3b682afc3143d347da9e7f94280cc5d09572bd46ee6944a806a29a888d0682dcd75e4a6f73a2a49a40229b4c843eb2411821cef1de4176be8715ffe30ad120df643584c878e5e17d230e1b06930a8e40193831d00be359b5e06d4f576a3e45f5b0f0a4187aebade2c8ebfc02a9df5f0067193f8821b49ddb17d995e6b6e89a4e8a0470821ea3350727481d68733e33ba7a2a47bc040c4dee5a9eac5855fcba9407895dc9c795622bab4709527f5fbd3c8b64492a361b383d8ed152665b74dd5a0c1fcf0cba63e51a64b190bc285a366bb31f830ce4b36806fd40aff8f4a85d8576a079c3cd7ecfe6157e068af41602d3385a88e47535e35b2e10a70335cd76b1e4f31adcb9b23859618813536615e40343351078f0eb88b021b714e272a4fc25f6c2d48a56da18fd970c53e852c68892b68c2be852f7e53e364c1d3b459a317019dc24ebcd96a48c9d372c8a4ccc20dacea7bf69b98ab9294e097f14764b1992a3cfc38e894c26cfbb3c481008db4d9e13aeb1a3cc4b575de1b01f0b8638d51be4851dcd106b18ba604919687bc37cb26f66bd1c1e7e6c399ec06848910b8f099f660df452942ec30f9bc2028485cf8c64f9ba5ebcd285384360124b00b1f6cc02cd8685006ca0046ba590c9d2339b3406401f34806fba6767546e5a08e56f14ee9ceef459ef7e028f46c8cfb4bac0f46c7853e4d6fafa5c45daa3a9cc63d9266c8a888fa669bc1a634304c6087a5e87801a6bc9335e38ed96cc569e1bcd5d00bd926f2aae3a9f54128830948522522960ae51be0ee62caa90f78caaf74af8b41b1b87462a0f1bba099dab3d1d36f243509def967f2ee0e51f14757c75ab085c32f993f0bd8cc283b7bdad97114c1bbf156116b1f7dde43d7255c4d5268ba814fc5e1e354660d5a7708d0c933a4879ed4da376fc1e97199fd0602c24399ca2e0f7e42f3601ffeb8f47b9c70b431f5b9841c13609e7ac5a1f204ef32c40da8b707d0912253a6ac55e244f72cc1a5fc26de54245a8499e37b7ddf19c57b27c72254886c23de7b576e1bf74bcd1884cafd94f3658f2f0a7cdc8912b9f2ecc7f5ec88dba422b8a3916a5934f3d12f979a0549ab5b4beaaeea73aebb5a9603ae5c46aa74f17162d28689d9f37887ee842291020309f43ee06418c94c271253cd2a7c8d9ea621f3ccecc3218978280c10a1e311ea3fffc7c0d6a39daa090d0fa93f8e7367b7aa958a778426d2277eb8269be5b81537294dc464cf44adca0104c1d621271f9eb7d8c00cb8b49c63e179bbf2e6ea11846612d3b9f1bf38dc8423d7bb883c9729f4492b323a6d6fcea78e06a777198a75de8c0cb193998b6ce4d466cb1ff58055fcf461e7c154b686efc079e789f2f3eacde6091b8a70e334b08f4ef7bb6e2f31f66035258a800f75a081b2f3ed18bf592e0ac43ff15a217cd4ded17463f3f4d3aab972f6add64533e23a48bfbb3c238090efe1f715a05b58a4dc4f035b312214ab52b4ae302e08c8f8b93d629daaac6839775d78fcfe1fd918164576717ad0f24f9336c18c0d36d9235effdc704412dcf490a272b121cbc314ef49a308abb972396662827cd8cdf76a95b592b88f1a234adf781851f1ec3b083a8ef6a6bedf07e10cf7b9a5f7c8b612532ae46d2b0d3a7fa53b8ab5c82c66135628473497a285e607038e5a8b99ecad5892fbf1921b9090e7373a832cb5c695013f8b6aa6b3c980b65835ed0f7365def89621bc7507eb7479d3a5bee7b103d8587afa364fd4d73f34f464939341ad685417edcb95a69ff2e0d2cf229082d1b93a4ce1026c5bb3ba4e097d336cf7913006d38af980075472247e13e9b1c578f7f0e200c78ccd45d4369b36d95998881a49d975e2af567c984535302c0f47cd4320815fb62516cf46b5cfcb93f44aedf29de0420a64df5f225910124b9ec628c5ea54ec654ce8349598210ccce5159cf2ab894eecb307055ce750d630373364fb18f2fb3d2c818b851c6601f14569742a8d5c1ff8aac8d446c2700f83f21edb09df7da7710cd22f2d4c92feab3f40557223f70c591ed6a24ca6dda72b0495a7fc5797216f5849c5251b5ebc605653337fbc9d24447fdddc17451a277a9bd975699fcfb748db13bec435868b595b4b937d944b60e548d33ae912eee523cc6fc5d04010a02a62bf9be81e120d3d925e2960bfe1c3fa8de2393fc7ff9c17bfd8db6696d1f37f7ad50448d30b40689f37b53870d76cf3bb779b2cde5226a7bd8e4818684194e411e14dddce6bbfb03b85e84ff6136f77767f44da0bf4c025b5701ecbc3124436fe3889189450bee990d1a8630daa102888cd7923768f37ad283eb97942afe4800ec7b3571196800539002c1e387a8fa6e995bb03e3956300111e828a6f04ce99c99d18687c83fc1cbacb413a09bceeec83e9c6c0d0be432077025445bcc7ffb713910f08af28597ff9fcff3db2e94fb0897b93a49d34b0ad4d925c6e0db244e32487bee80efec01f4251ecc894833de356169363ffbf3b5386c25ee9a6db7ff787cdb942eda04870bdb81d1d633b023345f350821f599639f259f42b9f4b4b69ad5763ef98fdedab8a25b6d4fdb78e6887664a7d1b79ca2719a3100db36b0ebcc792b6d02042e5b9e86bf79d30560c2a8ab1d42db09d8e50330c3f229bd716dcd2293992e389282c1d47a1259f4d0bc43d52aaae97a7396faf09c998460e719cf5cea2afbfac699045b0580352b79194d78b60f98d42c2904c06434c9f9830b4bcb9db70d2ae28574afe111f6bb20e337928c071788ece9be3e3902c8ef5213bd4b77e5fe2dc8a293613f500ce0bb3b3bf18eef759865991b35df7172fad267c321501b00b9f26f517c1bceacb2dabeeacf8cd80591e82b23d1e5bcc463bf449b58543dff6fe6b7a93dc3582e0b2359ece291a602094cc4d0565b474b584aa5a7c0a186be1dbbaec8d26d8b1c8c490cb478a6fa80abf778985008f56a4b4006a7c452a7f03a7d22573ac21a5591451568f017bc8be0566b128ad3b37aed0806fe92599f340bddb20af5d6cff035ed2a3be0b6901927fa0e804f8ae37f792cd859a419b7eb9d80fd9a764423a70b3012d1391fa8002e553261f8dc8c144e79ba37524692e644df3fe163456395f0f0fa6330193e76592d4dec869cad432afe80d6b034154c136785f6d8c479ed79e1eaa094edbf5ee198ab368ef8c37afb38bc27a726f008eda8b9291df7b3092be541011ed18e4456e9f37149a4c2cef99c7748cc4604904563b3c7e7f586489352778327c45139e3a1fe27de821f149e06a4830de32ca897914c54a05a2665e043534d60fafb6a09189077eea94e6630da8b45306737da7cadfbadb72c923dae19756800fa92a3f3ffa59e8d196c781d90cd824494469690776246a45cb9e72b003c5623aa8b94cd6f7cd79a4890c4a4fc880fb22fb01fe802b2b0dbbcdabef85fb54ebe5bfb7f78300297db872f5a67f6fc8bfca611ac3e79e3c91162af81851122654495219ccf39d270b5557f11176ebe2d06d9476708ebef125698e69213d74266015b1d9fbfba6276936258dad493b1478abfd9ba157aacf63c1f2dfef4148624edb6cfc42516ad899d42b1bc8c37211c9ed5eea936ec5ea3525bab8dffecc409c4c36d9d8d3f11e200face65aab71fc30b1db27f0296455f573e8f0fcfd9329601ed68c50e30bc723411dd11484816749d7c0ba55c687a1c93bd55f130efc54ad2087cc9b297d1dd8363e0f5fcf2a4ddcc4ef9f29aaba8e351d547779b677da023ea964fd35557c891fba80231d0b80d07ba5899506c385f3525552d0db1b0f0a6acb05c1760ab12c9c12715ff0f077991664c35ecaa973d69e5dcb09f7d5ffca3b9320202999c7e9cd4dd8c999c0fc4cee3c92d7a7134c8578545a50e31aaaee396e27f61176c3ead3a185fcefc30e68fb936ab10bd44e8cab719541ae764fa5722b0080f57ec95d2b8337c78be5be87b709d04a354f800def0e8b2bd76aa5125cd4c37d684c8d53fff9ec67c70b3743dea1f81050325eaa67ae838578557a4a0ca6ca407adccd4482ab98a488c00e9cd01e6466dc759ca69f71af8f6895925561bc0528f5fe9c3b1668c4f9da8388190e6a8b22d766fb9d319bc74587475dca21d88dda488d3876570f9e57e3fea8b8350832de12fb9f812b8518855851e1907f31461a1e0e426f8838b85f79906e157de872d0a030e523f5c0ec52f74770874341a403592491456c65dfa515d0f9480fa4fc27964d030db46cbf89cd5e2336f4a78969ce758df00e849faa196415cde93a6ca8223d847fb77e900bf744aff327b38beeb1345107fea11715b0773519068ceee81f310fdf88249b88d9b13a08d9d1d6c3e75c5ad564e1200116ba3a13a7d345513c5a72f6e2691b2adcee6b4df5b89cf3b7789b95cff55bcc", 0x1000}, {&(0x7f0000000880)="2548a74721eb4a3f8e37629adaeceb0ee908cd60b5d0b50f71d2ba397302795e80b34c5073eee034c1f6ce47c2c51a1fd550e7435e14f5860b4917f572b683770ea549c8b63e9d82ab5f470c9bea0d5fc68ec15915e9d91ee19ffd9a9d06c09ab9503a870da2bfd77e45e84bc75bce3d8f9c4a849c4dbd091b61051fbb7d45233576e26a4ebde859af9ae3df951df0d238f173a2327d13d722c7348fdc944d2f9edc7d3c8f2d5469e04561557ac5286e8098effce2b2d369209128de81fb6eddc558eb125598250af065caaa0f", 0xcd}, {&(0x7f0000000640)="71ac27ac1881e61bdc2c61ee3449d5fd29456ca97ed734e2d32abf32041bc1a87481cfc957c8ff44469868650bedea5667e16069a8c80604470765360a4210324051", 0x42}, {&(0x7f0000000800)="9fb4a76b116e2925c0ab72c6f3d917960551c3ff805de511dda88cbb5476cab8c07b3433bbe2360fcefd5efe7648f8949172a0edb9cd9d6ec730ce83b4", 0x3d}, {&(0x7f0000000980)="920be20556f8ec955cf8a92fe4f327368b8680bd534f8d03329916fc7655637d0b3efbeee609e1264ae4e74bfa286d5b02485a3ab6294aa602db0f450d03bcb3dcf55e", 0x43}], 0x6, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc7d}}], 0x18}}], 0x4, 0x20000003)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)

02:17:14 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000009010200000000000000000000000004000200700002000c000280050001003a00000006000340000000002c0001801400030000000000000000000000ffff0a01010014000400000000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000c746f0bafc0089faddd5ba611fe9fa9257caf5c6f74d8d495137454724527bb460004f4c532d6d8df7658dbfe21f9ec73e55fb74b90c05e6e21461dff67975f02ec4c9a26998eb533f68d1f2393af9c2d5a8fb050d2154c1a9e913a0210d2074e75131a8f8f5b507"], 0x88}}, 0x0)
socket$inet(0x2, 0x200000002, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:14 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030006, 0x3, &(0x7f0000000300)=[{&(0x7f0000000040)="200000002c0100000c009cccce0000000f000000020000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010003", 0x3d, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x9}], 0x0, &(0x7f0000013800))

02:17:14 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000009010200000000000000000000000004000200700002000c000280050001003a00000006000340000000002c0001801400030000000000000000000000ffff0a01010014000400000000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000c746f0bafc0089faddd5ba611fe9fa9257caf5c6f74d8d495137454724527bb460004f4c532d6d8df7658dbfe21f9ec73e55fb74b90c05e6e21461dff67975f02ec4c9a26998eb533f68d1f2393af9c2d5a8fb050d2154c1a9e913a0210d2074e75131a8f8f5b507"], 0x88}}, 0x0)
socket$inet(0x2, 0x200000002, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  234.756100] EXT4-fs error (device loop3): ext4_fill_super:4443: inode #2: comm syz-executor.3: iget: root inode unallocated
[  234.768233] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:14 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:14 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000000009010200000000000000000000000004000200700002000c000280050001003a00000006000340000000002c0001801400030000000000000000000000ffff0a01010014000400000000000000000000000000000000012c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000000c746f0bafc0089faddd5ba611fe9fa9257caf5c6f74d8d495137454724527bb460004f4c532d6d8df7658dbfe21f9ec73e55fb74b90c05e6e21461dff67975f02ec4c9a26998eb533f68d1f2393af9c2d5a8fb050d2154c1a9e913a0210d2074e75131a8f8f5b507"], 0x88}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  234.852490] EXT4-fs (loop3): get root inode failed
[  234.877717] EXT4-fs (loop3): mount failed
02:17:15 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="b86855f5093e28297e1ed386c63f3b713b7c4d3c567254eec54495bc63f7867469c4d9f809c70492d7b2ba71d56a2303a8268351c703bca5fd81bc84c99f873fb98604b2de89fe8fafcf276d19058419cce521d52ae4667f3812f28d2f40cc8411a7543ef9dd8396807cf7aa86d7de3eac028729901ff0747094238da28ff75f30f1b11492cef4392f33fb07922c6fa9eee5d62edf1de10c10b442ddd7fffb061cf15982277401f24ef84a4a3e1943cc9aec26be3166a3b4d4539190fae602a7dba158c816cfc9bc2227e73dcd2595cc69c627f9586863206808582ecac9532ff2e318652bbba11fd3b1c6f5ca362254ce316dab50082c265cc7e7c16f1ba9372fcf4073f64cb49d470499029ad8069d5f280748761b5dcbef5564d87c1723b82b2e0cd07f2e33e5ffbbed6b454ebea651f9fc5db06c73c9d88ae3ea098c99257d533972ee1f8955805546162d617863ccdd0de6eb9f365b6966320cf266ac06bb96201f3c9c6ed2150757015c37fffa42c02b6bb296df1d7d0d5669e03cf4b223da7b02df381be3ebe4cd767ed479e366c3705aa5ee4767aa69fb66b79a9ca29f2d0ee29c4528808a89779b53d7d57df953003dc3d9fe7da60e32a931b11b1882f5e43663f87cb30dc6f4adbbc443963f0d6c5c517d337e9e5c157753a0152d2080c8b7009d5334c0fa19a1bd6550fe490a2a86a19f6ed4e21f28333d5e9b73bf8719b587a24c4bf0f461e6a37423fc02583ee4071ffafcd4d09cea3eaf1bb2f13e96516545d7a2dddcf7aba0b8d62240954c4e485201f152c9220969aa895544634142492962f8b1ce5307138623c68faf7f0c080652533ee3bedbad81d630cc22d2162413c9b47a3decf94c2ed7e78209d37691908b3416aac4bbf9e2ac69bf1cb93532b728b6d0387f2cd4043f9cd8a72c43069bde1965a7689616061432696a764fe4a47ef636d2d7156b3bb46888c00239c602c561937c16a6db1f5be7244d91fa1b46707ff99eb8b9810ff0c81b091e7456536cec473153963db3237488f021ff2a45b762b29964a7a3c24a0312f7aea7d4e2a964e803d8f1a1b86b6cefa38d52fba291bdcd2d69674d812a355fe5464a1c2a57219e81845ccca61cfe9e5b2055b3d1db1d24bc0d6a10d47b84781938efb9c96640aa350bc275f3e7c80659fa780aea71d5a218beec408bff5787b20e914b7650bebf998fc223bdbe5296d0237658bda49958d7e659b3b41f3659d46b483182deb90ade1569116fe603168ed953a5c4758aef03160909b889fd62bb7a6aa2a6810140b42288b96d29bdf011191a628ff15f6fabbd96f88e6ae10f775162ee1a00e75d69dec97b184170ffa8df3fd635d4da68ea7e73dedb199ea750b94490fa64ee8c500799f576c214a2960cfead713757d015a7d26bb6968938f84bc7ee72ad61ccaeff1b424065e93120d94bedfd6233ed5f9f2bc8773564bff0e0502bfa1f37cbffd79b19699aac2b441ca94298dd65e7922f4021103c5b0b0ab871d3e65079793934610b25019c0540d0388c0cfd273ac4d7c828c5f231d330e09c1779bf54f4cb4cfc4adbfebedfa167963498c140b2217f333746bac0aad5b42a9553b97969f5c22408cf671074ef25d08e0924bc95028ab621e791269963dd22a5a7b5c753120d7fb3920ecd60a4fec393049f32cf93bb360fdc34b96d701e2121b4e22f422d876b17cebf3703e28d7675b7cf7a254a622af753ffc379d31f70cf6169eb852ca677558a44d8bb6186ecfbb9b034260b7cdb9d35129abbcfda12998c8b9cfe39acbdd97fe900f4af472f6c6c69e433a3c46b56f6a9eeaa345aa04db35ef5b004067a4a245e59b251ebfb979b7919d584b858aa0931b5b64ab872fdaf8525963b296cf44484c54b2d0ae3b78a490313dee0d82356291493b3e8a41a3571e52a13b579809431e2d56182db3fa8368c815e32997e75115ea325ec83c18cb960c2377e4bda5345581ccb2a68fc7170dd367760d2f98454df2aacdedf99f549cef2a0c5ffa909b0978093dbe80c177c58e012ff4d0bb3ea96806f36493ae4c35ecb5f56dff4cd2fca8990e677dfc64e3b0628863a203704180b6e2bbff85471d9593bb37399de5716525226c53544ec59ee9b36af30de87a79435cb28927dbaf0e849943649c7f303acd4ea3ca18aebfa48bbcfa44c4360f8774611364a6c54c64d126d40849766a897897330d5228dc7e02e77e45664c206aa6b967bf6fc8a0669dd1daece6d1dd44cc24866e43406553b3e0d94238bcebdbd97f4f85565ec15b113f9221889405b346cffd6a27d695e45ca3f7df0b5f9f1d2b6b1aed55fdf028c58f94b0218223ca2c0cf2f1c9ff2a1f2f1789f5b16ae5063d43dfe4f4ceaea166ad86bf8fa205920fae46aec971c8493ca69edc59c3b83c86030f261cb6c71232d0f49290a71c937e8056be1fb2576804b928d26ae8dda9f3dbb7cca9840b730c84d8f0987487907313fbac81c1106dce3f1d55b2b04f0792f75cc6deb0c406bfc1aea413eace74b92f95f2c32af8984a47fa3127e806074cbf60cf184b92e28cf27e7730b7a64db04bc87ee19e77910b03c6594845bdf7bb6fa43913f0d13f486a6cd6f9a3d7e6730589134a631b011e6b8bbe3e107d8a326d5e2f36fd1048ee7fce6130c8bc36c04c76164bf4920b9767f5019c178ea8f8f0c4c89017219634c458aa14f0fab43bdb2494a4f78b58645b1a45534cdd8865b32ccdea1c588dc1b5d6ce4e0dcfa7d6db7f589984ffdc8f743fcc2210eb30d089fffa05d7c47984943e982f77e10e44a3c6f9a9858edcf56c68dbf3a6815ee236cc7f79b5be7adff966ce16b06aaa5caa6b7ed3a76762f909a46135e667225e610d9af12eb03a7a1e29bdf0bc28584541881e4e943ed536b4a269d2cd42d5781dc3343ef917be9db847370414809f15b42d5d23fbfc057af09471e782485d307c4b4db5ff340b4c424d543eb9aad32a27c30887e98fcae2a35d6acf642d1b33259eb0eef971af9a61c0282d7e5b4ad8e62766cde6a19c05e8b492a740502097d3b11ceb986973226b603e87f6a0f7403bfe26f17c85348db319bee6455b917d939a845d455e292a4f3801173081a9bcec21701e4f700c7e9b080f8b39e999272650d5a76ad0111c21a5b86027c43200cdf417c0abcc211d7c7349e7be851c696f811ce7a9ae446c9a1c9a6e1770bd5bd528866e93c4ed8269ef2838fbc6a7ee2c9f504d8248ce107fc924133b7876c0a51fc70cc967fcd108fa8371a8e8be6b446794d505b661a62b473300ef50c155cecbe2f686511c67b68aa21fe1be847acd70c6d12f6f088a53e13ce66f12cb712c28dd1ec66cf23a6997f0148dc13dda76ee91b94be04f9c915771559de8d64ad91851dbe791cbe794a2f800237597fa39a53fb260d92e8e845fe55a4d8e007c605292ab53297476f8c4a87435fe6c66f4650217c2abdd9efa9a0362ce2bcea6f6b6e4e768467c84b5fd762194cac4071b1b586d2e986e7c4d0c48d83760a9e59d3cacca39666779012331dfeed0cd22d596842ef241f0e56616883ae262c0f79e04360462f2029f76ef7fd73bafd67078a30292b72186a369383d25f8a3ad736d8528d53d5ed842404beb450e7c4900b09f25aed132fc811fa119fb52b73d62224e112a53d2abce1ef74ae9924e32f8123e4598b4f13105de8491628a8c1b3ee64c447e389258123ec527135d81612c7eb71a0bcf00d710641788ac4ce6168f52952d35e81116f43efb2a3e986350f41e0d475ae3a62f743edba70c90c28b5c2786d93bae76441f22f6376792aabe8cc7be0881ef6e75b6c45d03622f09188429fcecfba79d8e70fc5559778fe96ef435a795de5907e0de44de1ae47cdf93aa3e81d94f1ebaae4720dfa3892858088d96aa283533bc98d2d93fab2870e6110910fc87f0b426cfb3ff250cdd9683e0548212617b628c2c41d77806a068e56cc2a1f8b15212b3a021ab78b3671f91cac3d4332c83b54e7af9e808ac0319308d06f4c86fc16af25068f45998c8807f20acf34f25bac8984f45eaa965525a5f9a182098acd96d92839af4f6cd9d29227a47ce3689c6c706a2d7db62d8529bd452064c45c3d373bbd1e00ae7893194fb416ae6f76a32ec59b7424b720c199f59b92fbff103ddbbf00de60ed0fb98cb154d58ccfe58089ab700a7f06fec968a5e1beaa594ccdeeed198df5eb46191335ce39f62cbb638dbf72a2fc87dbaf7606624381c97838d7014ff85713cee4e6a14d9cd4f7e344a283d4922971629e11738d468d029557b6ea83381a781b3e126dd4d156e23145aac81c5ba4e0297cb09652ae70b76f9c9c1df10d23f5d999b6b2cec77de0a55dffa713fed2df440eac7b9775800810d65fa2cc77c2d19d89ad3e663529d78f752036be7b68f8c847b3b4166bea1294398bcdb37b6256a8090f230c012bb333b640af445fcc3222cb630c6a5d7ccf71bb7259f48e313b6b7d6dee4d502a561e49516604ce19124e2ebe8c25d63a90811be159827c649966b9e57c251cb6e0599b8defd05ec6aa0337614e6542395116c909af2c93f6d17834a27eb8a9aa1cf908bdfc5f20cf6e760ae7759ec36249ff19e59f2eb692af2bc435ac15a324553f267239f992e5128497f10e560f14428a9d2b07c4c7c28ce8dcc9bd5b59c16e8ab34d9e45ef7deaae3d2fa4f6177025b1ecbe83b02b21fa77a17b46859609ea14552d1a2ad65a05a32167b0ec72af9b759649a98b850ccc18d6942d0471df228c63112830f90bbd8425970f4ef845f2579ab78d31fe6eb8c5a2aff1ba5e8c10294b614d91d0f3e2c0af9866ef3720b7c954e17bb15f17586893c580b9a8a0ae98ac105909930fbcfc9d1175bebc9db05235f9766c9314b29ed636b096f40a2dec2da5654de027faee8b5edf1ea72640aeef74b5297fad3383d6ca88f2e126a1ee833a74dda94a2357a2f1e89f1c6d065a30447b1b60cf48018f599b8c4d32d8ec2edf8113536db270c4bad13e11a334931be673185980f4cb114946e3e3defac214489c1144cec1565082aa7b06b20e3c79a1672c3bdbc404c273fddded432c883fab3125adb2fca9eea8dd8a06608123ec577d1382ea29ea8ac3b44cc16992e0171a1e3cb4f76f6b294921749273747a434d94614a7226fb96936be0a5da77370163d3e8d6de97357638029f2b15fbadc668525ab5c5cd7c7761662d6d17c614c8fbf579833e5b66150f5df53ab1b185f74eddd1cb64ac45aadb77abe8942d25726bb7f2d48bddf9528b4c1b81069f6677fa58e1b037d004feaf6be14a5b5af6ee9fb915f6b1d0ffe7e235e66fb1975d61dd2f030fe5b5a1c5903f39c9728c50ab96484a34721d77bf1c7f71c6ddb4f4cd8761fe77ecd46b5641e0eef5f1fdcf200ab6d1de03842c2d5fae891d34f5c4ccc4742f071647f5f9ce3a532522ac17f9750087fba951ceeb3711c0403642466ddedae7b85cdec1df9abd81ae5ca0a795255010f8946ec0db9919c46103f3300c1edee5ff41df4b34e6a57b3600fe28c8e19384df3520632a3a898351ca8c63f58413ff0ad05639b0bcbd99a9152a51dbe19328b5bb69efe3274ed8dc088d5d5e72877b86505632fb4314ced55d3d1496207fd7dc88e8d1ddba2a6ff0daecc8ddff9db6608d517fa94345aba79130eac8c58c28d593f77f9c649fa3010124aed86950182c4e1a64c4679cde871e49436ebbe6c212cbe253b23a4ffbd67ac5c1492203dc5ee611f4ad70b3737cf4c9e19933d5422571db5fca355f8714369fed44d634367f11875bf7b6528fafbe2378fe40a11e7a2b6ee9e7e16e57c12c7cdd5b7590605743aae12886c35ef318237025eef22d546acda27cb0d8ce25e2efbb8d083ea991ed608009227dfda25cc60779a82f23b4c0972fcddf61ab2e443c78c92f0ece60a339e3d7271876c67d53cc0e26aac1b2077a45e18e46c4f92a3817a859f41512dea5f3b298740f426fe9a4777caf3b72f5bc7f7c1db7a6424ad881622b82ca4903837f65499bcf4a6812ee2bb1e87395f8c3c7b7ace371c1a33ff6521b2042eea20f6fe103920cbac816ecaacde3d45688b52f73215dd68f38a341924b8cb226be118d2e2ae63790049f372d0114d7673be06380f98c347a1b5a41dcf2148579f675da0f3516a9e36e2d8e8cfdeb2ae850106e3e2d9cc140461b84552d43b00330cc3379261a38c94d7c2873a4bfc5d275bb6afda7f88a3ba70df1f886ed691a29d623e35c9ecdc022b110c644da1cac16198ddfb7ab9a31972092cbeed83739fbb690fe083387cdda5b36eecab70a78b172251ae8e758ad09c3c1aae80e621d90c959df9e0ff52199d1ce3df969ecaa819f818ccc5cd613359ff5c25662ae7d5140f1662198eea74172a062f5b061ff6a66aeb9eeccec99d6cb08733fb0f344ec31738475468c86ebf51ad7e643d6fd5792f3972fdb6e154825745e31486924adbab07288ef3234cd4c39621122693b0f90ee475899d6127dcc7d37cab77565b9ba8aa7c6a434c6ab062206691be9187175113eaed818ab071d05f7dc15187902b4d5d6da0b23df8a8a893f3cef567ce6837f6ec822f1b28f0ec64a77801eace46968dbb11b747e0589a624cdc812dbf688a05942e4b3035f0ff5e6fa7a592e3371114332475a5854101fd36d0c5262a8e49e716c5ff4b44ab7b7ac7e2a0e4d23939aabde46da71d17ae9b09d1662cceb32460ab86d35d711555fd77ba2fad90a01a8a309c9ff32d93d189ef279166f14810ed0c8cdc632e3b93bcf71c41005394d3dd5d265926aeda2da2e1d0063fbbf311302cb3a3fb7bf039e73cbfb56b5a24b448c0b3e1eddfeec9df10e6dbb5fe12d37cd2a2e327c0c4eae65e4dc6b6cbe8ef537e228e33f256bf82e203e4c6d288072378b3765d805a1583e26ab098c28e05614d0ba93e0c1f3c7d3dbb06ca02e3228f634b19b5b82cb1cd4ccee16148d73b2a95400b3f552c63bc75e4fe85a8c47ea6167e5968fd94665983953420950d098d66fecc72230ed9bf3d22562a93fa2af3ee0f388a173d9654d161d10822fdb5ec58ca4294131732b5c6c44fd84098d9142a36882827ec2726f9d06318ba30e16a2a9862d5789211ba4b1984f10f398e1604ea3fb97536c09067629b31226a57f1604509ba18e1aa706877b3cc2775e6826bd2a129b2eae4dc33c7f1ef4c51810b212c05bd9898d4097ddb8a6d85424d810e8e252547cf4aff353bcea0ca0d293596518d573efacb1a41545dbd6d36d48e403cfc2ba0a2dde37df1382389f9c05e87d18bd51cd20793f81fda8611e1b7886f03fcfdb063552f91c45d51a5bdea4b0e667e569a8bc2d2ef7352926a57bbb0b422b1330c2cffe067fd4b4a11417eeb0069bac4195fc4dcfb3236bb37f620f46ae8897ce4036e57709ea9e655e1579894a04d2122bfd19a13d6d99f606ae4926e77d57b850f7bda2dd8af0e1ed7169425e18e7880b25e74038b0e12714436759875d8a8d667f08161e0ac6838204dc13a8a9fc50a7723f7713c88c5bf6c417ec75f804e55946c7263096c95f55110a466d989be316175eeada9f4c09270b23c82047986c2fe965bb3ad892b1dafdc8e1dae8142c929592a16d6a2cff8eaea35c262c4bb92d2b7c2268264a152310421a499639af5de55cfb38420f416ab29ed022bdcf7d546b94453bd8b24bad63a784c50e1dcec8a3266067d7a5b64792accfdf19e3f2b75722110a63a1e8b49bb29d33266a389cbafd1e44cb41dc22874e7ae76c73b2e3ee3a747abdaf9494d677df01426858c2080ac127758bcd97860cad3be55f55de48d2e59053812769b8579e279b72a97f8cbe1cf1c5e47d29d8d3d027f5a7c1cf71be20937ab932f8ad19d7454e80ba7b0172db3c81b406263143bc07304a6f290cc05695234bbb375589a3909e3a355985a3336b2e1ad2ede654aeaff01a1aa68887fbf10b2bef183dadcc4e4d9e218e4b8d16538ae98649bb5e1785d57f67989b9c08cb207c52a40dc5a7acc1cdd9d4d531049da4e8c2748b36ff455b32685eaba8997b5636d45a7a65b0917e96580b940372fee1b106708573906617629ac277967a1d52e44588dbeb12e7b48cd39e68fb3757e6397455fd80b66df5e175667af2dd32c704e178276fcb92a5be41d35d2ebc71231fceaf0c5c671fd01e6f8e15022707fd8fe6ac3c37f214214e08120b77c91bb97a27a224c39ac93acb35787d933df0a667f9941888da6cd4373dbd1c407243fe2d389407f3c860dd1dc0f161787bc6dae6121b9fbb8dc0da43756d42aefdc32f19526a817b7121e8578b2c162780be5b1008435628b3c69678253f8dc8bfacd333403380963529d8db04a09761ac211a0e6b8a26cf06c0812526dad713afd1577c7317bcf93a9fb0a727209bfc619a66033dd47fd2a497e13f487fbc968239c85f5ddf7d4385f729eac64170503e4a90938b0338674e797a43f42f541803e5495172f42c37113e326ebafe1b8b645ea2fc5d859818c94ca7a53e5ac2762a2041096e9416f89188612312ad67a36995236fcc31579021763c9fe612b57669feacb3d779580b160bf8130660341d822cbda22fc355c2f7c1347367ef769cd70932828980e3927046e0861b2cf890bb30f392c10e0be7f40bc835e0c8fc22a0f151a87d99274df672202f21be3f283f514556830bc11fa30c9491d618eb331946a2d83ae0172750a86d574796feae5b3965052bee4d57db83a993560512739d2dd620349ccde2d6370bf14f339b2ea8d21d12b3c8a15f8ad9dae500acc3ce6790b539f023282d8194b1fbe5d106b8878e65b8779b8d4a92d3954b7911cf87a3c83317dc46624fec23f8e2db90cb5de424629cf680b9d3e3d30c0c428f2f1f2909466471e9bc975e257f0f03e9035bf280561664e9f9c78a0f1fba2ea7b0d9a14a462adf51a5e8f638d9d6615da93093bbe3f13cb2646bf3ca98ccb26f5c6c75686632f72c430c2feda2a9d9e2e254cf9f0e14fbb1f0ae2415042159785ab402de4fc142cd6a7306c52938c4f5ca23299e803854b9d01a6218c129412d350944f8cb6df9a8ce5ce8ddd8c90a54ab2924bfad9c6c5268f19324dfab1564d670f25a679d9a32e116b7b9a16a85b87e8e397814e93cd4585aa3b07a805e92e298f1d7ec6f7c344412807231651217d4448cc2a1bd7d474cdbf3180cd73b7299c6655ac1a6ecf731c2736aae9aeb11727ba8bdd79ea1021668106e491fbdb3a47a2e3ba0d6b3b279f473937a332ddd8b91ba900c8338f0bb602f3f64c78fc0808595bae0b4f5e22c7ebeb3fae5fc9ff8ee2332ddd12e17b8f361717bce05b676ac15dd0d56e669e976a9263852cacefac0ca1865c3b890450d59d792e1049c580c7411a87da812aa8237863817cec11cc34a254d1bf39a5e8bea42640f4a796b3422d65158b1adc5e6265b2bc789764bb736019bfa304e6bc61d1d513fb881f083335742371d50e4d83874abfad80ef591a0e6ed29aca51ad62180ee813381da1f7f8b21918264224ecdc4e09c3e9ebb21ea372d6f7a3e53e71f1403077dfe4bed8a2f9adb9d946e9d836170546d3921f500ca60ed94394f0d461dfe05a0fe8410a87ede0b3b6fe5ed9f1b5f985358e14c4d4c4e539f551204ce4d797be0f0acf2216fc9fda7611d3df5e13a4a9896790713fa73584f822cbe5254ff74f7cb269bb75749ba189067a5175a54575fd1135ad1777903d69f3ccc49b6327be2f9ed23c9107cd6ac7427a332d8e695cb07f84a8dca270d66a2d93492574067bf7f9abd0e90502c6c988255c4c419c66df3aaffef06c78e0a1519b8b1be27de36e5e2c1209c349327745b9bb3c0c62b229bd5bf22416b3ee80dfe09ee3c96047232c2f770efa830f71619209b4ab9b377fea504bd00c3764b537f85668eed22ca74a8ff1ab5a42618499b3cc5f7de0e5b29286fad38cc072d068602c2630c85b944aa13506868fa20755007c6e78784be1f8cbd89bd671be093ca899e1a9cbe2a36f1d32439bbcb87e3689376ffb38c92b43539b5c32c4645f43d105502b976bd325cde62d5a05f4f81449f2900eeea856a47cf598ef6ebbd2ef87713607a120a034c4296714e2db65093b060c4ea60586d8aa8b4d694b5c768d557e2979f75564b8c8d056d7f1cef932198e88c3d3d07b76ebef0ec617e44258ce4c640921f7ce3a0bfdcfc5cadf7f38cc3deea11f1ac30a6acd98560ec236c81b47245a1cac77aa749d0cbbf14509290368f275465c68ff60d1dbd0b9bca55a20463005a032de232c7da0f587424113aa5e092557798162bde01b6b0d575830fb9591637978f4cac5bc6f06fe95712dfbe776d5de593aed54bf93e9114a03a4c7188b569bb05993e0b48aa4eea8003e2974d7eb7db5de558dc0b52a93609dbcb87a87a06318adda2bf69509ecadbb391c171c55626b0de285da8c2c334989f8e8abd28068fe80a7af04d389a315ba21b989272f8ce6bec50998ee4c5ed82c85561feda3fca500560ac177dd43c17e4a5cb391de1380bcf52a08778c5cf9f1b5273ece70134082d5326163aa77a0eaccaa33e1a97f2f0903e71375600334d34c0d6791165f3eb9a546fbd565c0c614b0fb38c58db6cd2bfc53414f7d825b629c6228ed08f13e4614d059d6dea78344daa67c87cc6c7f7d7e222cda29e628a3dcaeb6407708b5c7bd74b7b3549d749d01fc37920415932640cce9d322e58f7561ccefb0d72d01756a5463ba16e882bb95be8bc4168e0b9ab9dfc0b0c209a3dff8849263aa1824f05e57391b079c17fa517907f8689625ab34d50f73557ccd061b653247e4b0f6a5af178c511bce4aae9a6547245acc4ae75c703adb5537bc5252bb9b32f3123045cc074d34aaf4cd0ea5ccb61b266d27e863e156f44c4193055f5facdf2949e6b68aeb57628d71550e4bb7c74dbd1879e4ffcacb40c2664a90723dd04b92ca2f63dd3d4e38584b684e1e4219a6471be6176420846510b247437a2f24b2cce32b75e4ccba29314c7b9d7c1aeafcb0d96cb53203df2ffec2f9dc03171a75a9b43ab9797be1e2a5095561700a8d675f91dbc0228b0d1db226c44ca8491081bea09d4d9aedc9a5c467eea878dabf54f72385f0e64c304463d39decebdbee8164496c3eb72780c638144ab77a468dc7bb23a987be3e6294285ee458f5e70a7b61d18ae060e1440671eafdeb0202dc18163dfbe40a6ebb756255d1ef75a2f0adb00b25ded8010aefb9fd37ea8bd79386b0a8e095c38ccc77c80b9279c72054667e3f1b02145a8660e0e9fcdc21667c02419447c93c557783a5d70b5de6f78a47b6aba91193f4ae54f3e8107c5a0b650fd87978f46d661b8a873077fd942e3fbda2ec2c3c22259861a8d23081a02dc102c65da020affd4436863b3e30b4bae96b0ff16c31e7936789979fbdb6864708c3f4c8cd4e909cf151f5d9eca17ed79ba3c69e4b71072e5062ee784b7547e11eae488bdc8990ec2d47282fda8b1a91b7c84635799ac140130eebe71868935853aafdd3c6da50d401baac60c81766308704c070eb570c65f1c7219cebf6453d890e91050", 0x2000, &(0x7f00000007c0)={&(0x7f0000000140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  234.942236] EXT4-fs error (device loop3): ext4_fill_super:4443: inode #2: comm syz-executor.3: iget: root inode unallocated
02:17:15 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:15 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
write$cgroup_int(r2, &(0x7f0000000440), 0x12)
getsockname$packet(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r4 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r5 = getpid()
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r7, 0xee00)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x1c, 0x1, 0x1, [r1, r3, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xffffffffffffffff}}}], 0x58, 0x80}, 0x24040014)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_flags})

[  234.988274] EXT4-fs (loop3): get root inode failed
[  235.014772] EXT4-fs (loop3): mount failed
02:17:15 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:15 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a15830000000a03000000000000000000050000000900010073797a310000000a34000000030a01040000000000000000050000000900030073797a3200010000080005400000be2438d748a8cd88e1b333e298af20ba00000900010073797a3100000000140000001100010000000000000000000000000a4dfb7e5094c301af3d25d7bb06c2759b058211aed6353edf05f3b7dada4fb9449497e011c3946bbf0ce8c1f61e3b0c64ced532c624d71e8af81b518256e7699b40f1041a4128c5fbf2617e2d66a4d2e62def808f5ab654c8e3fbfd0072a5aff2f56a9d809f0772e372445c7bb3a10621eab1d41e82b3e95dfacc2e812072715ab989e0ad368d09644ae9de07bd47d7746ce436b45c5dfd1eb6a0e0493ac2b2ff191f42803960948847b30b242e066fcc50b1592d7529e3e80d76dab812a500"/342], 0x7c}}, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/68, 0xb87})

02:17:15 executing program 3:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_create1(0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x30}}, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x2)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x7, 0x80, 0x2, 0x0, 0x800, 0x140, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd2, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0xffff, 0x9, 0x2, 0xb4bc, 0xee37, 0x7, 0x0, 0x552f, 0x0, 0xfffffffffffffffc}, r2, 0xd, r1, 0xa)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

02:17:15 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  235.119136] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:15 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={&(0x7f0000000140)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:15 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:15 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = getpgid(0x0)
r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x500, 0x0)
r4 = gettid()
perf_event_open(0x0, r4, 0xd, 0xffffffffffffffff, 0x8)
sendfile(r0, r3, 0x0, 0x8400fffffffa)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r5, 0x20, 0x0, 0xfffffeff000)
fgetxattr(r5, &(0x7f0000000040)=@known='user.incfs.id\x00', &(0x7f0000000140)=""/10, 0xa)
sendfile(r0, r5, &(0x7f0000000000)=0x2, 0xffffffff)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x300, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x4910b, 0x4, 0x7, 0x3, 0x0, 0x7, 0x5, 0x0, 0x8001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0)
fallocate(r5, 0x0, 0x0, 0x10000101)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xe8, 0x5, 0x0, 0x3, 0x0, 0x5, 0x10, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x5c410, 0x81, 0x8, 0x5, 0x0, 0x381, 0xff7b, 0x0, 0x3, 0x0, 0x3}, r1, 0x1, r2, 0x10)

02:17:15 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f00000000c0)}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/231, 0xe7}], 0xa, 0x5, 0x7)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x600, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x81, 0x5c)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000b80)={0x0, &(0x7f0000000a80)="1a02accc44c764808a8f2730e7fc228e61ee8e9d40068b6d189f410f8b8305be8008e542e18c0e95776fa9898279da63fb4a2e46726deeddc2ef035fe99f3adb275975703929bfb7192a71b9b229055f407197563efa09daac0c284a28ac17c990578b8c59e4380e7512ce9e630856e8dd9c144555681be9573dfee344b6c8aad6efda9a2178d6a36ae837fd7c03691b9820895e5cd812fc6a5817634b14fae03ff82475337c08b9b49c85f1aceb7c6a4aaafe98c3f7790dfdfa763cda9bc0d825f11c", 0xc3})
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000cc0)='.pending_reads\x00', 0x40000, 0x40)
ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000d00))
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000d80)={0x1, 0x1000, 0x4})
r4 = creat(&(0x7f0000000dc0)='./file0\x00', 0x182)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x5a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5e, 0x26}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x400}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x48801)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r4)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020080}, 0x4000)
r7 = openat(r1, &(0x7f0000001100)='./file0\x00', 0x0, 0x190)
syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r7)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x400c001)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x90, 0x0, 0x1d, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "122557d95a388836b0c333e4e66126d2"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, 'mz'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

[  235.332997] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  235.351950] audit: type=1804 audit(1623205035.469:7): pid=13978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/181/bus" dev="sda1" ino=14471 res=1
02:17:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
getdents(r0, &(0x7f0000000ea9)=""/400, 0x190)
getdents(0xffffffffffffffff, &(0x7f0000001040)=""/4096, 0x1000)
getdents(0xffffffffffffffff, &(0x7f0000001040)=""/4096, 0x1000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000500)={&(0x7f00000001c0)=""/58, 0x3a, 0x24, 0x4})
perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x80, 0x7d, 0xca, 0x1, 0x1, 0x0, 0x3, 0x4, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x3, 0x4, 0x5, 0xe00000000000000, 0x0, 0x200, 0x0, 0x1ff, 0x0, 0x2a}, r0, 0x1, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="73797a3115aa5fff167951311776142076a5d035b2d81080cb83469dc08ca1cfb9eed98cd466fdf03ec17da843757c306367b59a0558e898e6f18ed2bedc309c0c8fcebcd6c4d1b32dd6afa886c542d72464b0b14f4566d792a5bbaeb098382189d7aade001bcaded354a2f53fc7f7514c53f515181460c74ea0381c21f6a896cc685c9e0bcab25d1036a854c355417e734db98df5ba78bf9ab5095ae3bd4ae1b4597884f07bb02bca61429c11523bf6836e515df25771e2f08f9ee1e06aaaba6dd8ff1a5371b4cfa952cceba81afd2504b0affff6292b94a0"], 0xe2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x50, r0, 0xc07da000)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0xb8c00000)
r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="000000000000000000000000e2aa000000000000846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000680)="ed41000010001200000004008000000000000800050000000af3010004000000000000000000010009", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[])
getdents64(r2, 0x0, 0x19)

02:17:15 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  235.508776] audit: type=1804 audit(1623205035.559:8): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/181/bus" dev="sda1" ino=14471 res=1
[  235.582800] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:15 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:15 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000c80)=ANY=[], 0x32600)
write$cgroup_int(r3, &(0x7f0000000040), 0x43)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@flushpolicy={0x16c, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@algo_crypt={0x48, 0x2, {{'lrw(camellia)\x00'}}}, @sa={0xe4, 0x6, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x5c02, 0x4e24, 0x401, 0x2, 0x180, 0x80, 0x21, 0x0, r4}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xaa35a74b62396ae9}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x80, 0x7fff, 0x3, 0x100000000, 0x200, 0x6, 0x5, 0x5}, {0xffffffff80000001, 0x3, 0x8cb, 0x3}, {0xfffffdac, 0xd6c3a45c, 0x5}, 0x70bd25, 0x3502, 0xa, 0x3, 0x8, 0x11}}, @offload={0xc, 0x1c, {r7}}, @replay_thresh={0x8, 0xb, 0x80000000}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40)
dup2(r1, r2)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)

[  235.812059] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  235.838030] EXT4-fs error (device loop3): ext4_map_blocks:613: inode #2: block 9: comm syz-executor.3: lblock 0 mapped to illegal pblock 9 (length 1)
[  235.932008] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:16 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:16 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r0=>0x0}, &(0x7f0000000380)=0xc)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7a, 0x5, 0x7, 0x0, 0x0, 0x4, 0x20000, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x9}, 0x18143, 0xaa1, 0x9, 0x4, 0x6, 0xffffffff, 0x1, 0x0, 0x25c, 0x0, 0x9}, r0, 0xffffffffffffffff, r1, 0x3b9feedc5b2466d2)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002d0100002d01000005000000000000000200000f01000000000000000000000000000000000000000000000000000000db000000000000000500000000000000000100000604000000000000000000000000000000060004050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000100"/333], 0x0, 0x14d}, 0x20)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

02:17:16 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000c80)=ANY=[], 0x32600)
write$cgroup_int(r3, &(0x7f0000000040), 0x43)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@flushpolicy={0x16c, 0x1d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@algo_crypt={0x48, 0x2, {{'lrw(camellia)\x00'}}}, @sa={0xe4, 0x6, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x5c02, 0x4e24, 0x401, 0x2, 0x180, 0x80, 0x21, 0x0, r4}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xaa35a74b62396ae9}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x80, 0x7fff, 0x3, 0x100000000, 0x200, 0x6, 0x5, 0x5}, {0xffffffff80000001, 0x3, 0x8cb, 0x3}, {0xfffffdac, 0xd6c3a45c, 0x5}, 0x70bd25, 0x3502, 0xa, 0x3, 0x8, 0x11}}, @offload={0xc, 0x1c, {r7}}, @replay_thresh={0x8, 0xb, 0x80000000}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e23, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40)
dup2(r1, r2)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)

02:17:16 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:16 executing program 3:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="01f59aaffd9ea5")
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000011c0)={r0, r1, r0}, &(0x7f00000001c0)=""/231, 0xe7, 0x0)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
socket$kcm(0x29, 0x0, 0x0)

[  236.127806] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:16 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  236.430083] audit: type=1804 audit(1623205036.549:9): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/181/bus" dev="sda1" ino=14471 res=1
[  236.500797] audit: type=1804 audit(1623205036.619:10): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/181/bus" dev="sda1" ino=14471 res=1
02:17:16 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x1)
lseek(r0, 0x1200, 0x0)
r1 = getpgid(0x0)
r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x500, 0x0)
r4 = gettid()
perf_event_open(0x0, r4, 0xd, 0xffffffffffffffff, 0x8)
sendfile(r0, r3, 0x0, 0x8400fffffffa)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r5, 0x20, 0x0, 0xfffffeff000)
fgetxattr(r5, &(0x7f0000000040)=@known='user.incfs.id\x00', &(0x7f0000000140)=""/10, 0xa)
sendfile(r0, r5, &(0x7f0000000000)=0x2, 0xffffffff)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x300, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x4910b, 0x4, 0x7, 0x3, 0x0, 0x7, 0x5, 0x0, 0x8001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r3, 0x0)
fallocate(r5, 0x0, 0x0, 0x10000101)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xe8, 0x5, 0x0, 0x3, 0x0, 0x5, 0x10, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x5c410, 0x81, 0x8, 0x5, 0x0, 0x381, 0xff7b, 0x0, 0x3, 0x0, 0x3}, r1, 0x1, r2, 0x10)

[  236.539991] audit: type=1804 audit(1623205036.659:11): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/181/bus" dev="sda1" ino=14471 res=1
02:17:16 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:16 executing program 5:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x11, 0x1c9, &(0x7f0000000840)})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={<r0=>0xffffffffffffffff, 0x1, 0x6, 0x35e})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x800, 0x0, 0x80000, 0x9, 0x18, "59445f822ea920c9697b42dd5b91416cfba8fa"})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x19)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = userfaultfd(0x80800)
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/54, 0x36}], 0x4, 0xffff, 0x1)
connect$rxrpc(r1, &(0x7f0000000680)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000"], 0x18}}], 0x1, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x20)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0)
syz_mount_image$cramfs(0x0, &(0x7f0000000040)='./file0\x00', 0x6, 0x0, 0x0, 0x50, &(0x7f0000000c40)=ANY=[@ANYBLOB=',mountinfo\x00,fscontext=sysadm_u,fsuuid=\x00\x00\x00\x00a4\x007-\x00\x003\x00-W\x00\x00c-\x00a\x00\x00-c\x00\x00\x00\x00\x00\x00\x00,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="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"/343])
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000003c0)=0x1, 0x4)
socket(0x5, 0x2, 0x2)

02:17:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4400ae8f, &(0x7f0000000180)={0xa, 0x0, [{0x7, 0xc10, 0x100000, 0xce, 0xb796e280}, {0x7, 0x40, 0x40, 0x400, 0x5}, {0x4, 0x3, 0x4, 0x3e, 0x2}, {0x4, 0x20, 0x7f, 0x2, 0x1}, {0x80000019, 0x3, 0x42, 0xe19, 0x6}, {0x40000000, 0xb6, 0x0, 0x8, 0x4}, {0x0, 0x20, 0x80, 0x8, 0x4}, {0x6, 0xa, 0x7, 0x0, 0x2}, {0xc0000000, 0x9, 0x4a, 0x4, 0x7fffffff}, {0x80000007, 0xfa1f, 0x8, 0x3, 0x9}]})
dup2(r4, r3)

[  236.677881] audit: type=1804 audit(1623205036.799:12): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/182/bus" dev="sda1" ino=14475 res=1
02:17:16 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:17 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  236.825725] audit: type=1804 audit(1623205036.879:13): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir813490673/syzkaller.SjfxGS/182/bus" dev="sda1" ino=14475 res=1
02:17:17 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:17 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:17 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001140)=0x5)

02:17:17 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:17 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:17 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
read$dsp(r1, &(0x7f00000000c0)=""/41, 0x29)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
readv(r0, &(0x7f0000002600)=[{&(0x7f0000002640)=""/4091, 0x1051}], 0x1)
read$dsp(r0, &(0x7f0000000080)=""/54, 0x36)

02:17:19 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001140)=0x5)

02:17:19 executing program 3:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="a6e40dc9e19d7f3a29f3d6c92b98ddb4617b13f4a1cd0cb1", @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="285b021469131241a1bd20d38e11d3da0ec972c122a4f21f8ef5", @ANYRES16=r5, @ANYBLOB="05000000eaffffffff170500000008000300", @ANYRES32=r6, @ANYRES32], 0x24}}, 0x4040844)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4b, 0x5b, "a9d175a602c24f26776dee8177fd824001842e6fb00fc60246ae03df54650ec7818ade76221e02f84aa9aea0c78fbb4f428335d2c7409fba9632da835330a34e7322dfb4408207"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x4)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[], 0x4}}, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="00012dbd7000fbdbdf250600000008003200ffffffff060028000000000008003c00000000000500370000000000050038000000000008002c000100000008002c00ff0000000500380001000000050029000100000008002b00ff0f0000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="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"/276], 0x24}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600000000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010400)="030000000400000005", 0x9}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61785f6469725f73697a655f6b623d3078303030303030303030303030303030312c636f6d6d69743d302830303030303030303030ff0f303030362c00"])

02:17:19 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:19 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001140)=0x5)

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  239.033586] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  239.042582] EXT4-fs (loop3): Unrecognized mount option "commit=0(0000000000ÿ0006" or missing value
02:17:19 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  239.270170] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:19 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
ftruncate(r2, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x3e1)
pwrite64(r3, &(0x7f0000000200)="707973fb657a764d480ea0c32c03754dffc9224b59342cdac102b044806db9ec169ad8c9aee6fb3b7522e6f07a0b0d40338eb79e435cb9bfa446f5c85b59a774a9fe55dd3c7bd2c5046ab567826f51c1877f11a9113ca00af9bb74aa6f3ed411039e83504513bf614c2fec7da9d2eaa89732a0eba78b52e71f0671f40b4df424c8882c3ece04fcf51b186b926639b19ebfd2fc7732cdcb0a63556bdb68fd5d5d8619f0979199de36f2633be3575446a8620d95c86a3394098b527c728a9102983785dfd38e8b6f11b73df1a5eb2b33e7110f6e25b0eaace97b3993c25d17ed29aca619aabf99d0d8281337b5f73d2bc0a1884ed8f7da76834c3a7c20c516", 0xfe, 0xe51)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0207000902000000e4a17c0200000000", 0x10}], 0x1}, 0x0)

02:17:19 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001140)=0x5)

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00')
r2 = geteuid()
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [{@permit_directio}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r2}}, {@appraise_type}]})
preadv(r1, &(0x7f0000005f00), 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000005f40)={0x2020}, 0x2020)

02:17:19 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  239.618413] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:19 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:19 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:19 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  239.919705] overlayfs: unrecognized mount option "permit_directio" or missing value
[  240.076418] overlayfs: unrecognized mount option "permit_directio" or missing value
02:17:20 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
ftruncate(r2, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970658000000000000000000000000000000000000000000000000008000000000000000000000000000000706b74747970650000000000000000000000000000a3070000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff000000000000000000000000000082000000000000000000000000000100000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e3000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0001010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff0000000093bd9e5f2944938eed3159d4e6de6d223b9be7ca52bfdbd8810607f61ffddceab403559cb4c22d9941a63e5d4455c1a4a225099587dd6409c61c2bf2e1323f05"]}, 0x3e1)
pwrite64(r3, &(0x7f0000000200)="707973fb657a764d480ea0c32c03754dffc9224b59342cdac102b044806db9ec169ad8c9aee6fb3b7522e6f07a0b0d40338eb79e435cb9bfa446f5c85b59a774a9fe55dd3c7bd2c5046ab567826f51c1877f11a9113ca00af9bb74aa6f3ed411039e83504513bf614c2fec7da9d2eaa89732a0eba78b52e71f0671f40b4df424c8882c3ece04fcf51b186b926639b19ebfd2fc7732cdcb0a63556bdb68fd5d5d8619f0979199de36f2633be3575446a8620d95c86a3394098b527c728a9102983785dfd38e8b6f11b73df1a5eb2b33e7110f6e25b0eaace97b3993c25d17ed29aca619aabf99d0d8281337b5f73d2bc0a1884ed8f7da76834c3a7c20c516", 0xfe, 0xe51)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0207000902000000e4a17c0200000000", 0x10}], 0x1}, 0x0)

02:17:20 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:20 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:20 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe82b}]}, 0x3c}}, 0x0)

02:17:20 executing program 4:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:20 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:20 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/242, 0xf2}], 0x1, 0x8e1, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0xff, 0x3, 0x6, 0x0, 0x4, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x12, 0x0, @perf_config_ext={0x4, 0x200}, 0x8490, 0xebf, 0x4, 0x3, 0x200, 0x8, 0x1, 0x0, 0x3628ea05, 0x0, 0x1b2}, 0xffffffffffffffff, 0xa, r4, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:20 executing program 4:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 1:
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/539], 0x0)

02:17:20 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:20 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:20 executing program 4:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 2:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:20 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, 0x4)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  240.677097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.691389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:17:20 executing program 2:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:20 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200000, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  240.836538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.843792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:17:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/242, 0xf2}], 0x1, 0x8e1, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x1, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0xff, 0x3, 0x6, 0x0, 0x4, 0x800, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x12, 0x0, @perf_config_ext={0x4, 0x200}, 0x8490, 0xebf, 0x4, 0x3, 0x200, 0x8, 0x1, 0x0, 0x3628ea05, 0x0, 0x1b2}, 0xffffffffffffffff, 0xa, r4, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)

02:17:21 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:21 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000400000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x800080, &(0x7f0000000080)=ANY=[])
mkdir(0x0, 0x60)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x419302, 0x0)
pwritev(r2, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47fffe0}], 0x1, 0x400fa7f, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x48, 0x6, 0x0, 0xb5, 0x0, 0xeba, 0x340, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x0, 0x0, 0xfff, 0x2, 0x6, 0x6a, 0x4, 0x0, 0xfff, 0x0, 0x4f50000000000}, 0x0, 0x3, 0xffffffffffffffff, 0xa)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x2)
r5 = geteuid()
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, <r7=>0x0, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x26000}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x0, {0x0, 0x2}}, &(0x7f0000000740)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x0, 0x0, 0x6b, 0x3, 0x0, 0x8bf9, 0x46e, 0x0, 0x40, 0x0, 0x0, 0xee01, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa0, 0x0, 0xfa, {{0x2, 0x3, 0x0, 0x0, 0x0, 0xaef, {0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, r8}}}}, &(0x7f0000000b80)={0x20, 0x0, 0x80, {0x0, 0x0, 0x0, 0x76}}})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)="63d23a2dfe0bb939cd00ecb3993336ef241d66c7eb9b9ef9b583d82df1d6cdc330c3a5a2bd1a2aebc742ba92782bf2baf1ee7d62f8ddeb9e44f5e6fc4a7ab62d60fdb08a911065308e3eac111680f1afb65b57280a99cfbe8442f9f00d31c1cb5412eaa88ac8e905a83a1ea77717827a57", 0x71}, {&(0x7f0000000280)="351f5639310d763c4618a209f1b0b14db60d15d337039824fc90c0a8781a128325bcd061a7499f9b77d5b11e0111a2a8124646c8e45ef2ea29a3d317fde7e679ae61963a00ab9a5fb183cf2fb7", 0x4d}, {&(0x7f0000000000)="d506d1cc8623c98e3d373bc17e611e81a609", 0x12}, {&(0x7f0000000300)="54dc3a7e4a5b9679419a3ee6536980a512b77919b77c9996ae37a51c7d7cd8a91b25d5c663aa168c55a4064577d5485edd2f4f73068e52cbfab9df835c38565ad008dd0e637f589de644d7991985c3767e1bf26a96be57780fe416faf40dcddbf3249ba3090f7ad9cd26df02f1cfc42a442fdf658a84b481af8e99082ff69bcb82fc07c6ff9d18f6806b081200f9b6e2ee05357c2923262ba00e60304f8596395d4e40d214", 0xa5}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="3000000000000085eb8b61bcc3011b808bb01b0001", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="fd30a73a"], 0xa8}], 0x1, 0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 2:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

[  240.995241] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  241.018406] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
02:17:21 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:21 executing program 2:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  241.181515] overlayfs: missing 'lowerdir'
02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  241.203743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.236638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
02:17:21 executing program 3:
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x71f663f1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "98156b023facc439", "7bdb4f85219275796f54980466bd488c", "5e57ad6a", "5c3fb146b9843c02"}, 0x28)

02:17:21 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 2:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  241.499019] overlayfs: missing 'lowerdir'
02:17:21 executing program 1:
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x5, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000000380)}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000015c0)=""/119, 0x77}], 0x6, &(0x7f0000000500)=""/57, 0x39}, 0x2}, {{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001740)=""/246, 0xf6}, {&(0x7f0000001840)=""/248, 0xf8}], 0x2, &(0x7f0000001980)=""/229, 0xe5}, 0xa26b}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/116, 0x74}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000001b80)=""/85, 0x55}, {&(0x7f0000001c00)=""/204, 0xcc}], 0x4, &(0x7f0000001d40)=""/83, 0x53}, 0x8000}, {{&(0x7f0000001dc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000005180)=[{&(0x7f0000001e40)=""/160, 0xa0}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/109, 0x6d}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/217, 0xd9}, {&(0x7f0000004080)=""/230, 0xe6}, {&(0x7f0000004180)=""/4096, 0x1000}], 0x7, &(0x7f0000005200)=""/142, 0x8e}, 0x5}, {{&(0x7f00000052c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005680)=[{&(0x7f0000005340)=""/10, 0xa}, {&(0x7f0000005380)=""/90, 0x5a}, {&(0x7f0000005400)=""/136, 0x88}, {&(0x7f00000054c0)=""/244, 0xf4}, {&(0x7f00000055c0)=""/139, 0x8b}], 0x5, &(0x7f0000005700)=""/102, 0x66}, 0x9}, {{&(0x7f0000005780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005800)=""/126, 0x7e}, {&(0x7f0000005880)=""/139, 0x8b}, {&(0x7f0000005940)=""/23, 0x17}], 0x3, &(0x7f00000059c0)=""/70, 0x46}}], 0x6, 0x42, &(0x7f0000005bc0))
write(r0, &(0x7f0000000240)="fc", 0xe10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, "cdbe1ad24ed4ef7278dfd6138594583787bb55ae10ccd40bf913a58b52f78f7e44956141bdcf30498b6b77ed0cdfceb2675f35a2dbc709d1eb3f69ce1934a01b992b15290edb418bdb72949b6da65671"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="ad"])

02:17:21 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:21 executing program 2:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  241.622512] overlayfs: missing 'lowerdir'
02:17:21 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:21 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  241.777971] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  241.922407] EXT4-fs (loop1): Unrecognized mount option "­" or missing value
[  242.052927] EXT4-fs (loop1): Unrecognized mount option "­" or missing value
02:17:22 executing program 3:
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x71f663f1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "98156b023facc439", "7bdb4f85219275796f54980466bd488c", "5e57ad6a", "5c3fb146b9843c02"}, 0x28)

02:17:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:22 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:22 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x9, 0x8)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:22 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:22 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x880028, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xdfa}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]})

02:17:22 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:22 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  242.265754] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:22 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  242.311458] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:22 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x880028, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xdfa}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]})

02:17:22 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  242.439923] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  242.440413] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:22 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  242.597490] VFS: Found a V7 FS (block size = 512) on device loop1
[  242.704009] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:22 executing program 3:
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x665, &(0x7f0000000380)=[{&(0x7f0000001c00)={0x14, 0x23, 0xd92800488cb91bd, 0x16, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet(0x2, 0x200000002, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv6_newnexthop={0x58, 0x68, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x8}, [@NHA_GROUP={0x14, 0x2, [{0x9ef4, 0x3}, {0x2, 0x7}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x22}}}}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044810}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
recvfrom(r3, &(0x7f0000000180)=""/178, 0xb2, 0x10043, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x58}}, 0x0)
recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f00000000c0)=""/52, 0x34}], 0x2, &(0x7f0000000900)=""/251, 0xfb}, 0x9}, {{&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x4, &(0x7f0000001b40)=""/124, 0x7c}}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000003cc0)=""/114, 0x72}, {&(0x7f0000003d40)=""/67, 0x43}, {&(0x7f0000003dc0)=""/255, 0xff}, {&(0x7f0000003ec0)=""/145, 0x91}], 0x4, &(0x7f0000003f80)=""/68, 0x44}, 0x9}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004000)=""/40, 0x28}, {&(0x7f0000004040)=""/34, 0x22}, {&(0x7f0000004080)=""/83, 0x53}], 0x3, &(0x7f0000004140)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000005140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000005200)=[{&(0x7f00000051c0)=""/21, 0x15}], 0x1, &(0x7f0000005240)=""/136, 0x88}, 0x1}, {{&(0x7f0000005300)=@rc={0x1f, @none}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005380)=""/179, 0xb3}, {&(0x7f0000005440)=""/39, 0x27}, {&(0x7f0000005480)=""/238, 0xee}, {&(0x7f0000005580)=""/178, 0xb2}, {&(0x7f0000005640)=""/108, 0x6c}, {&(0x7f00000056c0)=""/133, 0x85}, {&(0x7f0000005780)=""/132, 0x84}, {&(0x7f0000005840)=""/40, 0x28}], 0x8, &(0x7f0000005900)=""/161, 0xa1}, 0x9}, {{&(0x7f00000059c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a40)=""/155, 0x9b}, {&(0x7f0000005b00)=""/14, 0xe}, {&(0x7f0000005b40)=""/50, 0x32}, {&(0x7f0000005b80)=""/84, 0x54}], 0x4}, 0x2}, {{&(0x7f0000005c40)=@xdp={0x2c, 0x0, <r6=>0x0}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005cc0)=""/62, 0x3e}], 0x1}, 0x8}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/33, 0x21}, {&(0x7f0000007200)=""/102400, 0x19000}], 0x3, &(0x7f0000006e80)=""/56, 0x38}, 0xffff}], 0x9, 0x10120, &(0x7f0000007100)={0x0, 0x3938700})
sendmsg$nl_route(r1, &(0x7f00000071c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb132005809b7c65b}, 0xc, &(0x7f0000007180)={&(0x7f0000007140)=@ipv4_deladdr={0x18, 0x15, 0x10, 0x70bd2d, 0x25dfdbfd, {0x2, 0x8, 0x30, 0x0, r6}}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x4091)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@xino_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:23 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x880028, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xdfa}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]})

02:17:23 executing program 3:
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x665, &(0x7f0000000380)=[{&(0x7f0000001c00)={0x14, 0x23, 0xd92800488cb91bd, 0x16, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet(0x2, 0x200000002, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv6_newnexthop={0x58, 0x68, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x8}, [@NHA_GROUP={0x14, 0x2, [{0x9ef4, 0x3}, {0x2, 0x7}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x22}}}}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044810}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
recvfrom(r3, &(0x7f0000000180)=""/178, 0xb2, 0x10043, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x58}}, 0x0)
recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f00000000c0)=""/52, 0x34}], 0x2, &(0x7f0000000900)=""/251, 0xfb}, 0x9}, {{&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x4, &(0x7f0000001b40)=""/124, 0x7c}}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000003cc0)=""/114, 0x72}, {&(0x7f0000003d40)=""/67, 0x43}, {&(0x7f0000003dc0)=""/255, 0xff}, {&(0x7f0000003ec0)=""/145, 0x91}], 0x4, &(0x7f0000003f80)=""/68, 0x44}, 0x9}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004000)=""/40, 0x28}, {&(0x7f0000004040)=""/34, 0x22}, {&(0x7f0000004080)=""/83, 0x53}], 0x3, &(0x7f0000004140)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000005140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000005200)=[{&(0x7f00000051c0)=""/21, 0x15}], 0x1, &(0x7f0000005240)=""/136, 0x88}, 0x1}, {{&(0x7f0000005300)=@rc={0x1f, @none}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005380)=""/179, 0xb3}, {&(0x7f0000005440)=""/39, 0x27}, {&(0x7f0000005480)=""/238, 0xee}, {&(0x7f0000005580)=""/178, 0xb2}, {&(0x7f0000005640)=""/108, 0x6c}, {&(0x7f00000056c0)=""/133, 0x85}, {&(0x7f0000005780)=""/132, 0x84}, {&(0x7f0000005840)=""/40, 0x28}], 0x8, &(0x7f0000005900)=""/161, 0xa1}, 0x9}, {{&(0x7f00000059c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a40)=""/155, 0x9b}, {&(0x7f0000005b00)=""/14, 0xe}, {&(0x7f0000005b40)=""/50, 0x32}, {&(0x7f0000005b80)=""/84, 0x54}], 0x4}, 0x2}, {{&(0x7f0000005c40)=@xdp={0x2c, 0x0, <r6=>0x0}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005cc0)=""/62, 0x3e}], 0x1}, 0x8}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/33, 0x21}, {&(0x7f0000007200)=""/102400, 0x19000}], 0x3, &(0x7f0000006e80)=""/56, 0x38}, 0xffff}], 0x9, 0x10120, &(0x7f0000007100)={0x0, 0x3938700})
sendmsg$nl_route(r1, &(0x7f00000071c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb132005809b7c65b}, 0xc, &(0x7f0000007180)={&(0x7f0000007140)=@ipv4_deladdr={0x18, 0x15, 0x10, 0x70bd2d, 0x25dfdbfd, {0x2, 0x8, 0x30, 0x0, r6}}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x4091)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

02:17:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  243.164577] VFS: Found a V7 FS (block size = 512) on device loop1
[  243.193697] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@index_on}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:23 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x880028, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xdfa}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]})

02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  243.355223] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:23 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  243.453970] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

[  243.552774] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:23 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]})

02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 3:
shutdown(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x665, &(0x7f0000000380)=[{&(0x7f0000001c00)={0x14, 0x23, 0xd92800488cb91bd, 0x16, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet(0x2, 0x200000002, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@ipv6_newnexthop={0x58, 0x68, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x8}, [@NHA_GROUP={0x14, 0x2, [{0x9ef4, 0x3}, {0x2, 0x7}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x22}}}}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044810}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
recvfrom(r3, &(0x7f0000000180)=""/178, 0xb2, 0x10043, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x58}}, 0x0)
recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f00000000c0)=""/52, 0x34}], 0x2, &(0x7f0000000900)=""/251, 0xfb}, 0x9}, {{&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/68, 0x44}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x4, &(0x7f0000001b40)=""/124, 0x7c}}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000003cc0)=""/114, 0x72}, {&(0x7f0000003d40)=""/67, 0x43}, {&(0x7f0000003dc0)=""/255, 0xff}, {&(0x7f0000003ec0)=""/145, 0x91}], 0x4, &(0x7f0000003f80)=""/68, 0x44}, 0x9}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004000)=""/40, 0x28}, {&(0x7f0000004040)=""/34, 0x22}, {&(0x7f0000004080)=""/83, 0x53}], 0x3, &(0x7f0000004140)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000005140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000005200)=[{&(0x7f00000051c0)=""/21, 0x15}], 0x1, &(0x7f0000005240)=""/136, 0x88}, 0x1}, {{&(0x7f0000005300)=@rc={0x1f, @none}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005380)=""/179, 0xb3}, {&(0x7f0000005440)=""/39, 0x27}, {&(0x7f0000005480)=""/238, 0xee}, {&(0x7f0000005580)=""/178, 0xb2}, {&(0x7f0000005640)=""/108, 0x6c}, {&(0x7f00000056c0)=""/133, 0x85}, {&(0x7f0000005780)=""/132, 0x84}, {&(0x7f0000005840)=""/40, 0x28}], 0x8, &(0x7f0000005900)=""/161, 0xa1}, 0x9}, {{&(0x7f00000059c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a40)=""/155, 0x9b}, {&(0x7f0000005b00)=""/14, 0xe}, {&(0x7f0000005b40)=""/50, 0x32}, {&(0x7f0000005b80)=""/84, 0x54}], 0x4}, 0x2}, {{&(0x7f0000005c40)=@xdp={0x2c, 0x0, <r6=>0x0}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005cc0)=""/62, 0x3e}], 0x1}, 0x8}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/33, 0x21}, {&(0x7f0000007200)=""/102400, 0x19000}], 0x3, &(0x7f0000006e80)=""/56, 0x38}, 0xffff}], 0x9, 0x10120, &(0x7f0000007100)={0x0, 0x3938700})
sendmsg$nl_route(r1, &(0x7f00000071c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb132005809b7c65b}, 0xc, &(0x7f0000007180)={&(0x7f0000007140)=@ipv4_deladdr={0x18, 0x15, 0x10, 0x70bd2d, 0x25dfdbfd, {0x2, 0x8, 0x30, 0x0, r6}}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x4091)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

02:17:23 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:23 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  243.701829] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
[  243.727569] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  243.864302] VFS: Found a V7 FS (block size = 512) on device loop1
[  243.872068] overlayfs: unrecognized mount option "smackfstransmute=" or missing value
02:17:24 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:24 executing program 1:
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:24 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  243.967558] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:24 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  244.008136] overlayfs: bad mount option "redirect_dir=./file0"
02:17:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  244.134901] overlayfs: bad mount option "redirect_dir=./file0"
02:17:24 executing program 3 (fault-call:2 fault-nth:0):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:24 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:24 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:24 executing program 1:
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  244.383488] overlayfs: bad mount option "redirect_dir=./file0"
[  244.430410] FAULT_INJECTION: forcing a failure.
[  244.430410] name failslab, interval 1, probability 0, space 0, times 1
[  244.443677] CPU: 0 PID: 14702 Comm: syz-executor.3 Not tainted 4.19.193-syzkaller #0
[  244.451705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  244.461252] Call Trace:
[  244.463863]  dump_stack+0x1fc/0x2ef
[  244.467507]  should_fail.cold+0xa/0xf
[  244.471327]  ? setup_fault_attr+0x200/0x200
[  244.475666]  ? lock_acquire+0x170/0x3c0
[  244.479667]  __should_failslab+0x115/0x180
[  244.483932]  should_failslab+0x5/0x10
[  244.487746]  __kmalloc_track_caller+0x2a6/0x3c0
[  244.492460]  ? strndup_user+0x70/0x120
[  244.496379]  memdup_user+0x22/0xb0
[  244.499966]  strndup_user+0x70/0x120
[  244.503698]  ksys_mount+0x34/0x130
[  244.507256]  __x64_sys_mount+0xba/0x150
[  244.511420]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  244.516018]  do_syscall_64+0xf9/0x620
[  244.519846]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  244.525045] RIP: 0033:0x4665d9
[  244.528270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  244.547444] RSP: 002b:00007f386adc4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  244.555167] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  244.562450] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[  244.569735] RBP: 00007f386adc41d0 R08: 00000000200001c0 R09: 0000000000000000
[  244.577467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.584769] R13: 00007ffeccaed4bf R14: 00007f386adc4300 R15: 0000000000022000
02:17:24 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:24 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:24 executing program 5:
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:24 executing program 1:
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:24 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:24 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 1:
syz_mount_image$v7(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:25 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 5:
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  244.847995] overlayfs: bad mount option "redirect_dir=./file0"
[  244.857415] overlayfs: bad mount option "redirect_dir=./file0"
02:17:25 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 5:
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:25 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  244.975433] overlayfs: bad mount option "redirect_dir=./file0"
02:17:25 executing program 1:
syz_mount_image$v7(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:25 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0)

02:17:25 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 1:
syz_mount_image$v7(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  245.154892] overlayfs: bad mount option "redirect_dir=./file0"
02:17:25 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0)

02:17:25 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:25 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0)

02:17:25 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  245.330235] overlayfs: bad mount option "redirect_dir=./file0"
02:17:25 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:25 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:26 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:26 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0x12, 0x1d})

02:17:26 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:26 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:26 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:26 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:26 executing program 0:
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:26 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0x12, 0x1d})

02:17:26 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:26 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:27 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x0, 0x12, 0x1d})

02:17:27 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:27 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:27 executing program 0:
mkdir(0x0, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x0, 0x1d})

02:17:27 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x60, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:27 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  247.196628] overlayfs: bad mount option "redirect_dir=./file0"
02:17:27 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:27 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xe6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x0, 0x1d})

02:17:27 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:27 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:27 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:28 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:28 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x104, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x0, 0x1d})

02:17:28 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  247.991948] overlayfs: bad mount option "redirect_dir=./file0"
02:17:28 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:28 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12})

02:17:28 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x154, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  248.164595] VFS: could not find a valid V7 on loop1.
02:17:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12})

02:17:28 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x295, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  248.213191] overlayfs: bad mount option "redirect_dir=./file0"
02:17:28 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:28 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:28 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:28 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12})

02:17:28 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:28 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x332, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:29 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  248.849103] VFS: could not find a valid V7 on loop1.
02:17:29 executing program 5 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:29 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:29 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)

[  249.011782] FAULT_INJECTION: forcing a failure.
[  249.011782] name failslab, interval 1, probability 0, space 0, times 0
[  249.063695] CPU: 0 PID: 15075 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  249.071728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  249.082003] Call Trace:
[  249.084612]  dump_stack+0x1fc/0x2ef
[  249.088253]  should_fail.cold+0xa/0xf
[  249.092189]  ? setup_fault_attr+0x200/0x200
[  249.096524]  ? lock_acquire+0x170/0x3c0
[  249.100517]  __should_failslab+0x115/0x180
[  249.105005]  should_failslab+0x5/0x10
[  249.108960]  kmem_cache_alloc_trace+0x284/0x380
[  249.113714]  drm_atomic_state_alloc+0xae/0x110
[  249.118435]  set_property_atomic+0x9c/0x2f0
[  249.122885]  ? drm_object_property_get_value+0x150/0x150
[  249.128442]  ? _drm_lease_held_master+0xac/0x130
[  249.133212]  ? __drm_mode_object_find+0xfc/0x3a0
[  249.137998]  ? drm_mode_object_lease_required+0x50/0x50
[  249.143663]  ? mark_held_locks+0xf0/0xf0
[  249.147768]  ? __might_fault+0x11f/0x1d0
[  249.151880]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  249.157383]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.162505]  ? drm_lease_owner+0x41/0x50
[  249.166853]  ? drm_is_current_master+0x4b/0x130
[  249.171542]  drm_ioctl_kernel+0x208/0x2a0
[  249.175709]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.180829]  ? drm_ioctl_permit+0x210/0x210
[  249.185194]  ? __might_fault+0x192/0x1d0
[  249.189390]  drm_ioctl+0x507/0x9c0
[  249.192970]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.198081]  ? drm_getstats+0x20/0x20
[  249.201910]  ? get_pid_task+0xf4/0x190
[  249.205814]  ? proc_fail_nth_write+0x95/0x1d0
[  249.210334]  ? ksys_write+0x241/0x2a0
[  249.214154]  ? drm_getstats+0x20/0x20
[  249.218062]  do_vfs_ioctl+0xcdb/0x12e0
[  249.221966]  ? lock_downgrade+0x720/0x720
[  249.226138]  ? check_preemption_disabled+0x41/0x280
[  249.231173]  ? ioctl_preallocate+0x200/0x200
[  249.235624]  ? __fget+0x356/0x510
[  249.239185]  ? do_dup2+0x450/0x450
[  249.242743]  ? vfs_write+0x393/0x540
[  249.246592]  ? fput+0x2b/0x190
[  249.249924]  ksys_ioctl+0x9b/0xc0
[  249.253491]  __x64_sys_ioctl+0x6f/0xb0
[  249.257667]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  249.262359]  do_syscall_64+0xf9/0x620
[  249.266306]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  249.271511] RIP: 0033:0x4665d9
[  249.274803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  249.293976] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  249.301790] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  249.310600] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  249.318012] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  249.325290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.332574] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
02:17:29 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:29 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:29 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:29 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:29 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)

02:17:29 executing program 5 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:29 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:29 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)

02:17:29 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  249.721675] FAULT_INJECTION: forcing a failure.
[  249.721675] name failslab, interval 1, probability 0, space 0, times 0
[  249.731291] VFS: could not find a valid V7 on loop1.
[  249.829501] CPU: 0 PID: 15108 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  249.837431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  249.846803] Call Trace:
[  249.849453]  dump_stack+0x1fc/0x2ef
[  249.853104]  should_fail.cold+0xa/0xf
[  249.856949]  ? setup_fault_attr+0x200/0x200
[  249.861283]  ? lock_acquire+0x170/0x3c0
[  249.865275]  __should_failslab+0x115/0x180
[  249.869616]  should_failslab+0x5/0x10
[  249.873452]  __kmalloc+0x2ab/0x3c0
02:17:30 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:30 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  249.877029]  ? drm_atomic_state_init+0xe7/0x3d0
[  249.881711]  drm_atomic_state_init+0xe7/0x3d0
[  249.886242]  drm_atomic_state_alloc+0xc6/0x110
[  249.890867]  set_property_atomic+0x9c/0x2f0
[  249.895295]  ? drm_object_property_get_value+0x150/0x150
[  249.900759]  ? _drm_lease_held_master+0xac/0x130
[  249.905527]  ? __drm_mode_object_find+0xfc/0x3a0
[  249.910294]  ? drm_mode_object_lease_required+0x50/0x50
[  249.915782]  ? mark_held_locks+0xf0/0xf0
[  249.919948]  ? __might_fault+0x11f/0x1d0
[  249.929637]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  249.935209]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.940481]  ? drm_lease_owner+0x41/0x50
[  249.944734]  ? drm_is_current_master+0x4b/0x130
[  249.949501]  drm_ioctl_kernel+0x208/0x2a0
[  249.953661]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.958773]  ? drm_ioctl_permit+0x210/0x210
[  249.963108]  ? __might_fault+0x192/0x1d0
[  249.967169]  drm_ioctl+0x507/0x9c0
[  249.970708]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  249.975845]  ? drm_getstats+0x20/0x20
[  249.979649]  ? get_pid_task+0xf4/0x190
[  249.983552]  ? proc_fail_nth_write+0x95/0x1d0
[  249.988243]  ? ksys_write+0x241/0x2a0
[  249.992067]  ? drm_getstats+0x20/0x20
[  249.995877]  do_vfs_ioctl+0xcdb/0x12e0
[  249.999958]  ? lock_downgrade+0x720/0x720
[  250.004489]  ? check_preemption_disabled+0x41/0x280
[  250.009498]  ? ioctl_preallocate+0x200/0x200
[  250.013923]  ? __fget+0x356/0x510
[  250.017489]  ? do_dup2+0x450/0x450
[  250.021021]  ? vfs_write+0x393/0x540
[  250.024835]  ? fput+0x2b/0x190
[  250.028032]  ksys_ioctl+0x9b/0xc0
[  250.031490]  __x64_sys_ioctl+0x6f/0xb0
[  250.035380]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  250.039967]  do_syscall_64+0xf9/0x620
[  250.043779]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  250.048963] RIP: 0033:0x4665d9
[  250.052211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  250.071354] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
02:17:30 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  250.079073] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  250.086336] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  250.093609] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  250.101412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.108690] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
[  250.237393] VFS: could not find a valid V7 on loop1.
02:17:30 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

02:17:30 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

02:17:30 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xbb1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:30 executing program 5 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:30 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:30 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:30 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

02:17:30 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xbb2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:30 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

[  250.621054] FAULT_INJECTION: forcing a failure.
[  250.621054] name failslab, interval 1, probability 0, space 0, times 0
[  250.623609] VFS: could not find a valid V7 on loop1.
[  250.643448] overlayfs: missing 'lowerdir'
02:17:30 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  250.708312] CPU: 1 PID: 15170 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  250.716521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  250.726178] Call Trace:
[  250.728782]  dump_stack+0x1fc/0x2ef
[  250.732431]  should_fail.cold+0xa/0xf
[  250.736337]  ? setup_fault_attr+0x200/0x200
[  250.740762]  ? lock_acquire+0x170/0x3c0
[  250.744885]  __should_failslab+0x115/0x180
[  250.746123] overlayfs: missing 'lowerdir'
[  250.749221]  should_failslab+0x5/0x10
[  250.749237]  __kmalloc+0x2ab/0x3c0
[  250.749252]  ? drm_atomic_state_init+0x25f/0x3d0
[  250.749270]  drm_atomic_state_init+0x25f/0x3d0
[  250.749288]  drm_atomic_state_alloc+0xc6/0x110
[  250.749301]  set_property_atomic+0x9c/0x2f0
[  250.749319]  ? drm_object_property_get_value+0x150/0x150
[  250.749336]  ? _drm_lease_held_master+0xac/0x130
[  250.749353]  ? __drm_mode_object_find+0xfc/0x3a0
[  250.749366]  ? drm_mode_object_lease_required+0x50/0x50
[  250.749382]  ? mark_held_locks+0xf0/0xf0
[  250.749397]  ? __might_fault+0x11f/0x1d0
[  250.749415]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  250.749431]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  250.749446]  ? drm_lease_owner+0x41/0x50
[  250.749460]  ? drm_is_current_master+0x4b/0x130
[  250.749479]  drm_ioctl_kernel+0x208/0x2a0
[  250.749492]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  250.749507]  ? drm_ioctl_permit+0x210/0x210
[  250.749523]  ? __might_fault+0x192/0x1d0
[  250.749542]  drm_ioctl+0x507/0x9c0
[  250.749560]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  250.749574]  ? drm_getstats+0x20/0x20
[  250.749589]  ? get_pid_task+0xf4/0x190
[  250.749605]  ? proc_fail_nth_write+0x95/0x1d0
[  250.749633]  ? ksys_write+0x241/0x2a0
[  250.749647]  ? drm_getstats+0x20/0x20
[  250.749664]  do_vfs_ioctl+0xcdb/0x12e0
[  250.749679]  ? lock_downgrade+0x720/0x720
[  250.749695]  ? check_preemption_disabled+0x41/0x280
[  250.749710]  ? ioctl_preallocate+0x200/0x200
[  250.749729]  ? __fget+0x356/0x510
[  250.749746]  ? do_dup2+0x450/0x450
[  250.749758]  ? vfs_write+0x393/0x540
02:17:31 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

02:17:31 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3203, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:31 executing program 5 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  250.749774]  ? fput+0x2b/0x190
[  250.749794]  ksys_ioctl+0x9b/0xc0
[  250.749811]  __x64_sys_ioctl+0x6f/0xb0
[  250.749825]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  250.749841]  do_syscall_64+0xf9/0x620
[  250.749861]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  250.749881] RIP: 0033:0x4665d9
[  250.749895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
02:17:31 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:31 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

[  250.749904] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.749918] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  250.749926] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  250.749934] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  250.749943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.749952] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
02:17:31 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:31 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  251.091969] FAULT_INJECTION: forcing a failure.
[  251.091969] name failslab, interval 1, probability 0, space 0, times 0
[  251.121756] CPU: 0 PID: 15215 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  251.129768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  251.139428] Call Trace:
02:17:31 executing program 4 (fault-call:5 fault-nth:0):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  251.142031]  dump_stack+0x1fc/0x2ef
[  251.145717]  should_fail.cold+0xa/0xf
[  251.149664]  ? setup_fault_attr+0x200/0x200
[  251.154022]  ? lock_acquire+0x170/0x3c0
[  251.158012]  __should_failslab+0x115/0x180
[  251.162519]  should_failslab+0x5/0x10
[  251.166330]  kmem_cache_alloc_trace+0x284/0x380
[  251.171134]  drm_atomic_helper_crtc_duplicate_state+0x6f/0xb0
[  251.177254]  drm_atomic_get_crtc_state+0x179/0x3e0
[  251.182208]  drm_atomic_set_property+0xb0b/0x1960
[  251.187062]  ? set_property_atomic+0xbc/0x2f0
[  251.191577]  ? drm_atomic_connector_commit_dpms+0x4a0/0x4a0
[  251.197317]  set_property_atomic+0x129/0x2f0
[  251.201742]  ? drm_object_property_get_value+0x150/0x150
[  251.207215]  ? mark_held_locks+0xf0/0xf0
[  251.211311]  ? __might_fault+0x11f/0x1d0
[  251.215397]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  251.220929]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.226048]  ? drm_lease_owner+0x41/0x50
[  251.230119]  ? drm_is_current_master+0x4b/0x130
[  251.234859]  drm_ioctl_kernel+0x208/0x2a0
[  251.239137]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.244254]  ? drm_ioctl_permit+0x210/0x210
[  251.248613]  ? __might_fault+0x192/0x1d0
[  251.252717]  drm_ioctl+0x507/0x9c0
[  251.256282]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.261410]  ? drm_getstats+0x20/0x20
[  251.265250]  ? get_pid_task+0xf4/0x190
[  251.269247]  ? proc_fail_nth_write+0x95/0x1d0
[  251.273786]  ? ksys_write+0x241/0x2a0
[  251.277609]  ? drm_getstats+0x20/0x20
[  251.281511]  do_vfs_ioctl+0xcdb/0x12e0
[  251.285416]  ? lock_downgrade+0x720/0x720
[  251.289587]  ? check_preemption_disabled+0x41/0x280
[  251.294619]  ? ioctl_preallocate+0x200/0x200
[  251.299057]  ? __fget+0x356/0x510
[  251.302528]  ? do_dup2+0x450/0x450
[  251.306075]  ? vfs_write+0x393/0x540
[  251.309802]  ? fput+0x2b/0x190
[  251.313190]  ksys_ioctl+0x9b/0xc0
[  251.316668]  __x64_sys_ioctl+0x6f/0xb0
[  251.320588]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  251.325271]  do_syscall_64+0xf9/0x620
[  251.329087]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  251.334287] RIP: 0033:0x4665d9
02:17:31 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0))

[  251.337505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  251.356416] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  251.364137] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  251.371422] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  251.378698] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  251.385978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.393257] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
02:17:31 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:31 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5401, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  251.437540] VFS: could not find a valid V7 on loop1.
[  251.441207] overlayfs: missing 'lowerdir'
02:17:31 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0))

02:17:31 executing program 5 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:31 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:31 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  251.587106] FAULT_INJECTION: forcing a failure.
[  251.587106] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  251.602299] overlayfs: missing 'lowerdir'
[  251.626067] CPU: 1 PID: 15256 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  251.634161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  251.643553] Call Trace:
[  251.646177]  dump_stack+0x1fc/0x2ef
[  251.650099]  should_fail.cold+0xa/0xf
[  251.653919]  ? setup_fault_attr+0x200/0x200
[  251.657041] VFS: could not find a valid V7 on loop1.
[  251.658277]  ? __lock_acquire+0x6de/0x3ff0
[  251.667703]  __alloc_pages_nodemask+0x239/0x2890
[  251.672471]  ? get_reg+0x1f0/0x1f0
[  251.676023]  ? mark_held_locks+0xf0/0xf0
[  251.680097]  ? __lock_acquire+0x6de/0x3ff0
02:17:31 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:31 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  251.684360]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  251.689227]  ? unwind_next_frame+0xeee/0x1400
[  251.693744]  ? __save_stack_trace+0x72/0x190
[  251.698179]  ? deref_stack_reg+0x134/0x1d0
[  251.702414]  ? get_reg+0x176/0x1f0
[  251.705942]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  251.712636]  ? deref_stack_reg+0x1d0/0x1d0
[  251.716943]  alloc_pages_vma+0x461/0x780
[  251.721104]  do_huge_pmd_anonymous_page+0x3b4/0x1e60
[  251.726447]  ? prep_transhuge_page+0xa0/0xa0
[  251.731055]  ? kernel_text_address+0xbd/0xf0
[  251.735469]  ? mark_held_locks+0xf0/0xf0
[  251.739530]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  251.744935]  __handle_mm_fault+0x289c/0x41c0
[  251.749340]  ? vm_insert_page+0x9c0/0x9c0
[  251.753493]  ? check_preemption_disabled+0x41/0x280
[  251.758499]  handle_mm_fault+0x436/0xb10
[  251.762551]  __do_page_fault+0x68e/0xd60
[  251.766603]  ? trace_hardirqs_off_caller+0x6e/0x210
[  251.771638]  ? spurious_fault+0x840/0x840
[  251.775788]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  251.780645]  page_fault+0x1e/0x30
[  251.784117] RIP: 0010:__put_user_4+0x1c/0x30
[  251.788519] Code: 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48
[  251.807506] RSP: 0018:ffff8880432e7850 EFLAGS: 00010297
[  251.812858] RAX: 00000000ffffffff RBX: 00007fffffffeffd RCX: 0000000001000000
[  251.820570] RDX: 0000000000000255 RSI: ffffffff83d97ea8 RDI: 0000000000000282
[  251.828701] RBP: ffff88823893c340 R08: ffffffff8cd240a0 R09: 0000000000000002
[  251.835967] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  251.843236] R13: ffff88823893d070 R14: 0000000001000000 R15: ffff8880b4f96900
[  251.850528]  ? drm_atomic_crtc_set_property+0x2e8/0x800
[  251.855903]  drm_atomic_crtc_set_property+0x2f5/0x800
[  251.861107]  drm_atomic_set_property+0xb3c/0x1960
[  251.865937]  ? set_property_atomic+0xbc/0x2f0
[  251.870495]  ? drm_atomic_connector_commit_dpms+0x4a0/0x4a0
[  251.876333]  set_property_atomic+0x129/0x2f0
[  251.880744]  ? drm_object_property_get_value+0x150/0x150
[  251.886305]  ? mark_held_locks+0xf0/0xf0
[  251.890373]  ? __might_fault+0x11f/0x1d0
[  251.894431]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  251.899921]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.905031]  ? drm_lease_owner+0x41/0x50
[  251.909078]  ? drm_is_current_master+0x4b/0x130
[  251.913850]  drm_ioctl_kernel+0x208/0x2a0
[  251.918065]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.923162]  ? drm_ioctl_permit+0x210/0x210
[  251.927510]  ? __might_fault+0x192/0x1d0
[  251.931566]  drm_ioctl+0x507/0x9c0
[  251.935108]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  251.940201]  ? drm_getstats+0x20/0x20
[  251.944006]  ? get_pid_task+0xf4/0x190
[  251.947895]  ? proc_fail_nth_write+0x95/0x1d0
[  251.952411]  ? ksys_write+0x241/0x2a0
[  251.956206]  ? drm_getstats+0x20/0x20
[  251.959993]  do_vfs_ioctl+0xcdb/0x12e0
[  251.963870]  ? lock_downgrade+0x720/0x720
[  251.968092]  ? check_preemption_disabled+0x41/0x280
[  251.973097]  ? ioctl_preallocate+0x200/0x200
[  251.977501]  ? __fget+0x356/0x510
[  251.981019]  ? do_dup2+0x450/0x450
[  251.984566]  ? vfs_write+0x393/0x540
[  251.988973]  ? fput+0x2b/0x190
[  251.992163]  ksys_ioctl+0x9b/0xc0
[  251.995614]  __x64_sys_ioctl+0x6f/0xb0
[  251.999490]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  252.004072]  do_syscall_64+0xf9/0x620
[  252.008416]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  252.013698] RIP: 0033:0x4665d9
[  252.016884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
02:17:32 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:32 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0))

[  252.035985] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  252.043732] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  252.051025] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  252.058309] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  252.065688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.072944] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
[  252.101981] FAULT_INJECTION: forcing a failure.
[  252.101981] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  252.114466] CPU: 1 PID: 15226 Comm: syz-executor.4 Not tainted 4.19.193-syzkaller #0
[  252.122361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  252.131805] Call Trace:
[  252.134407]  dump_stack+0x1fc/0x2ef
[  252.138050]  should_fail.cold+0xa/0xf
[  252.141863]  ? setup_fault_attr+0x200/0x200
[  252.146414]  ? __lock_acquire+0x6de/0x3ff0
[  252.150666]  __alloc_pages_nodemask+0x239/0x2890
[  252.155437]  ? mark_held_locks+0xf0/0xf0
[  252.159523]  ? mark_held_locks+0xf0/0xf0
[  252.163605]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  252.168483]  ? mark_held_locks+0xf0/0xf0
[  252.172549]  ? __save_stack_trace+0x72/0x190
[  252.176972]  ? deref_stack_reg+0x134/0x1d0
[  252.181322]  ? get_reg+0x176/0x1f0
[  252.184967]  ? lock_acquire+0x170/0x3c0
[  252.188952]  ? mem_cgroup_reset+0x200/0x200
[  252.193305]  ? __unlock_page_memcg+0x4f/0x100
[  252.197911]  alloc_pages_current+0x193/0x2a0
[  252.202360]  __get_free_pages+0x8/0x40
[  252.206273]  __tlb_remove_page_size+0x2a2/0x470
[  252.210966]  unmap_page_range+0x1360/0x2a70
[  252.215329]  ? kmem_cache_free+0x7f/0x260
[  252.219497]  ? vm_normal_page_pmd+0x4c0/0x4c0
[  252.224280]  ? do_group_exit+0x125/0x310
[  252.228362]  ? exit_to_usermode_loop+0x204/0x2a0
[  252.233235]  ? do_syscall_64+0x538/0x620
[  252.237380]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  252.242915]  ? uprobe_munmap+0x2d/0x4d0
[  252.247095]  ? __lock_acquire+0x6de/0x3ff0
[  252.251350]  unmap_single_vma+0x198/0x300
[  252.255808]  unmap_vmas+0xa9/0x180
[  252.259468]  exit_mmap+0x2b9/0x530
[  252.263024]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  252.268336]  ? __khugepaged_exit+0x2a6/0x3e0
[  252.272757]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  252.277788]  ? kmem_cache_free+0x226/0x260
[  252.282042]  ? __khugepaged_exit+0x2c7/0x3e0
[  252.286465]  mmput+0x14e/0x4a0
[  252.289732]  do_exit+0xaec/0x2be0
[  252.293220]  ? task_work_run+0x11c/0x1c0
[  252.297399]  ? mm_update_next_owner+0x650/0x650
[  252.302081]  ? get_signal+0x388/0x1f70
[  252.306107]  ? lock_downgrade+0x720/0x720
[  252.310359]  ? lock_acquire+0x170/0x3c0
[  252.314444]  do_group_exit+0x125/0x310
[  252.318453]  get_signal+0x3f2/0x1f70
[  252.322173]  ? __local_bh_enable_ip+0x159/0x270
[  252.326880]  do_signal+0x8f/0x1670
[  252.330436]  ? kick_process+0xe4/0x170
[  252.334343]  ? setup_sigcontext+0x820/0x820
[  252.338683]  ? l2cap_sock_accept+0x550/0x550
[  252.343110]  ? fput+0xf2/0x190
[  252.346326]  ? __ia32_sys_accept+0xb0/0xb0
[  252.350738]  ? wait_for_completion_io+0x10/0x10
[  252.355426]  ? vfs_write+0x393/0x540
[  252.359186]  ? fput+0x2b/0x190
[  252.362407]  ? ksys_write+0x1c8/0x2a0
[  252.366248]  ? exit_to_usermode_loop+0x36/0x2a0
[  252.370935]  exit_to_usermode_loop+0x204/0x2a0
[  252.375649]  do_syscall_64+0x538/0x620
[  252.379564]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  252.384761] RIP: 0033:0x4665d9
[  252.387958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  252.401378] overlayfs: missing 'lowerdir'
[  252.406867] RSP: 002b:00007f53a35c3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  252.406938] RAX: fffffffffffffffc RBX: 000000000056bf80 RCX: 00000000004665d9
[  252.426239] RDX: 000000000000000e RSI: 0000000020000040 RDI: 0000000000000005
[  252.433518] RBP: 00007f53a35c31d0 R08: 0000000000000000 R09: 0000000000000000
[  252.440799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.448096] R13: 00007fff8a87653f R14: 00007f53a35c3300 R15: 0000000000022000
02:17:32 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:32 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:32 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:32 executing program 5 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:32 executing program 0 (fault-call:2 fault-nth:0):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:32 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x9502, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:32 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  252.542603] FAULT_INJECTION: forcing a failure.
[  252.542603] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  252.557531] FAULT_INJECTION: forcing a failure.
[  252.557531] name failslab, interval 1, probability 0, space 0, times 0
[  252.572295] CPU: 1 PID: 15297 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  252.580405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  252.589858] Call Trace:
[  252.592467]  dump_stack+0x1fc/0x2ef
[  252.596116]  should_fail.cold+0xa/0xf
[  252.600106]  ? lock_acquire+0x170/0x3c0
[  252.604092]  ? setup_fault_attr+0x200/0x200
[  252.608462]  __alloc_pages_nodemask+0x239/0x2890
[  252.613263]  ? get_mem_cgroup_from_mm+0x135/0x440
[  252.618411]  ? check_preemption_disabled+0x41/0x280
[  252.623447]  ? mem_cgroup_oom_trylock+0x220/0x220
[  252.628418]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  252.633309]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  252.638182]  ? mem_cgroup_from_task+0x120/0x120
02:17:32 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb10b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  252.642874]  ? lock_downgrade+0x720/0x720
[  252.647038]  ? check_preemption_disabled+0x41/0x280
[  252.652108]  ? check_preemption_disabled+0x41/0x280
[  252.657148]  alloc_pages_current+0x193/0x2a0
[  252.661573]  pte_alloc_one+0x16/0x190
[  252.665408]  do_huge_pmd_anonymous_page+0xb76/0x1e60
[  252.670539]  ? prep_transhuge_page+0xa0/0xa0
[  252.675076]  ? kernel_text_address+0xbd/0xf0
[  252.679537]  ? mark_held_locks+0xf0/0xf0
[  252.683617]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  252.689000]  __handle_mm_fault+0x289c/0x41c0
02:17:32 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  252.693432]  ? vm_insert_page+0x9c0/0x9c0
[  252.697707]  ? check_preemption_disabled+0x41/0x280
[  252.702850]  handle_mm_fault+0x436/0xb10
[  252.706958]  __do_page_fault+0x68e/0xd60
[  252.711044]  ? trace_hardirqs_off_caller+0x6e/0x210
[  252.716188]  ? spurious_fault+0x840/0x840
[  252.720397]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  252.725259]  page_fault+0x1e/0x30
[  252.728734] RIP: 0010:__put_user_4+0x1c/0x30
[  252.733165] Code: 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48
[  252.752105] RSP: 0018:ffff8880b4d67850 EFLAGS: 00010297
[  252.757480] RAX: 00000000ffffffff RBX: 00007fffffffeffd RCX: 0000000001000000
[  252.764763] RDX: 0000000000000255 RSI: ffffffff83d97ea8 RDI: 0000000000000282
[  252.772041] RBP: ffff88823893c340 R08: ffffffff8cd240a0 R09: 0000000000000002
[  252.779348] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  252.786661] R13: ffff88823893d070 R14: 0000000001000000 R15: ffff888097108000
02:17:32 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb20b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:32 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  252.794053]  ? drm_atomic_crtc_set_property+0x2e8/0x800
[  252.799445]  drm_atomic_crtc_set_property+0x2f5/0x800
[  252.804829]  drm_atomic_set_property+0xb3c/0x1960
[  252.809955]  ? set_property_atomic+0xbc/0x2f0
[  252.814468]  ? drm_atomic_connector_commit_dpms+0x4a0/0x4a0
[  252.820375]  set_property_atomic+0x129/0x2f0
[  252.824891]  ? drm_object_property_get_value+0x150/0x150
[  252.830452]  ? mark_held_locks+0xf0/0xf0
[  252.834525]  ? __might_fault+0x11f/0x1d0
[  252.838691]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  252.844160]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  252.849274]  ? drm_lease_owner+0x41/0x50
[  252.853376]  ? drm_is_current_master+0x4b/0x130
[  252.858065]  drm_ioctl_kernel+0x208/0x2a0
[  252.862224]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  252.867345]  ? drm_ioctl_permit+0x210/0x210
[  252.871680]  ? __might_fault+0x192/0x1d0
[  252.875760]  drm_ioctl+0x507/0x9c0
[  252.879319]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  252.884457]  ? drm_getstats+0x20/0x20
[  252.888268]  ? get_pid_task+0xf4/0x190
02:17:33 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xe600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  252.892173]  ? proc_fail_nth_write+0x95/0x1d0
[  252.896695]  ? ksys_write+0x241/0x2a0
[  252.900507]  ? drm_getstats+0x20/0x20
[  252.904349]  do_vfs_ioctl+0xcdb/0x12e0
[  252.908275]  ? lock_downgrade+0x720/0x720
[  252.912441]  ? check_preemption_disabled+0x41/0x280
[  252.917471]  ? ioctl_preallocate+0x200/0x200
[  252.921894]  ? __fget+0x356/0x510
[  252.925467]  ? do_dup2+0x450/0x450
[  252.929018]  ? vfs_write+0x393/0x540
[  252.932752]  ? fput+0x2b/0x190
[  252.935963]  ksys_ioctl+0x9b/0xc0
[  252.939459]  __x64_sys_ioctl+0x6f/0xb0
[  252.943450]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  252.948046]  do_syscall_64+0xf9/0x620
[  252.951873]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  252.957092] RIP: 0033:0x4665d9
[  252.960308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  252.979254] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  252.987146] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  252.994514] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  253.001795] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  253.009074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.016356] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
[  253.038271] VFS: could not find a valid V7 on loop1.
[  253.053235] CPU: 0 PID: 15298 Comm: syz-executor.0 Not tainted 4.19.193-syzkaller #0
[  253.061137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  253.070627] Call Trace:
[  253.073284]  dump_stack+0x1fc/0x2ef
[  253.077096]  should_fail.cold+0xa/0xf
[  253.080919]  ? setup_fault_attr+0x200/0x200
[  253.085250]  ? lock_acquire+0x170/0x3c0
[  253.089280]  __should_failslab+0x115/0x180
[  253.093539]  should_failslab+0x5/0x10
[  253.097352]  __kmalloc_track_caller+0x2a6/0x3c0
[  253.102031]  ? strndup_user+0x70/0x120
[  253.105963]  memdup_user+0x22/0xb0
[  253.109524]  strndup_user+0x70/0x120
[  253.113257]  ksys_mount+0x34/0x130
[  253.116810]  __x64_sys_mount+0xba/0x150
[  253.120798]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  253.125412]  do_syscall_64+0xf9/0x620
[  253.129326]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  253.134524] RIP: 0033:0x4665d9
02:17:33 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x2, @fixed}, 0xe)

[  253.137726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  253.156835] RSP: 002b:00007f4cebf81188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  253.164558] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  253.171969] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[  253.179411] RBP: 00007f4cebf811d0 R08: 00000000200001c0 R09: 0000000000000000
[  253.186693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.194070] R13: 00007ffed230e3af R14: 00007f4cebf81300 R15: 0000000000022000
02:17:33 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:33 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:33 executing program 5 (fault-call:1 fault-nth:6):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:33 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100), 0x0, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:33 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:33 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:33 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:33 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x39df8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  253.327591] FAULT_INJECTION: forcing a failure.
[  253.327591] name failslab, interval 1, probability 0, space 0, times 0
[  253.338903] overlayfs: bad mount option "redirect_dir=./file0"
[  253.399697] VFS: could not find a valid V7 on loop1.
02:17:33 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:33 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, 0x0}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:33 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x40000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  253.706495] CPU: 1 PID: 15356 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  253.714419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  253.724920] Call Trace:
[  253.727540]  dump_stack+0x1fc/0x2ef
[  253.731183]  should_fail.cold+0xa/0xf
[  253.735003]  ? setup_fault_attr+0x200/0x200
[  253.739339]  ? lock_acquire+0x170/0x3c0
[  253.743422]  __should_failslab+0x115/0x180
[  253.747676]  should_failslab+0x5/0x10
[  253.751495]  kmem_cache_alloc+0x277/0x370
[  253.755669]  ptlock_alloc+0x1d/0x70
[  253.759306]  pte_alloc_one+0x68/0x190
[  253.763207]  do_huge_pmd_anonymous_page+0xb76/0x1e60
[  253.768326]  ? prep_transhuge_page+0xa0/0xa0
[  253.772747]  ? kernel_text_address+0xbd/0xf0
[  253.777170]  ? mark_held_locks+0xf0/0xf0
[  253.781248]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  253.786916]  __handle_mm_fault+0x289c/0x41c0
[  253.791431]  ? vm_insert_page+0x9c0/0x9c0
[  253.795601]  ? check_preemption_disabled+0x41/0x280
[  253.800770]  handle_mm_fault+0x436/0xb10
[  253.804948]  __do_page_fault+0x68e/0xd60
[  253.809055]  ? trace_hardirqs_off_caller+0x6e/0x210
[  253.814090]  ? spurious_fault+0x840/0x840
[  253.818251]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  253.823145]  page_fault+0x1e/0x30
[  253.826615] RIP: 0010:__put_user_4+0x1c/0x30
[  253.831214] Code: 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48
[  253.850126] RSP: 0018:ffff888043167850 EFLAGS: 00010297
[  253.855499] RAX: 00000000ffffffff RBX: 00007fffffffeffd RCX: 0000000001000000
[  253.862901] RDX: 0000000000000255 RSI: ffffffff83d97ea8 RDI: 0000000000000282
[  253.870302] RBP: ffff88823893c340 R08: ffffffff8cd240a0 R09: 0000000000000002
[  253.877582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  253.884970] R13: ffff88823893d070 R14: 0000000001000000 R15: ffff8880967bedc0
[  253.892305]  ? drm_atomic_crtc_set_property+0x2e8/0x800
[  253.897697]  drm_atomic_crtc_set_property+0x2f5/0x800
[  253.902915]  drm_atomic_set_property+0xb3c/0x1960
[  253.907791]  ? set_property_atomic+0xbc/0x2f0
[  253.912302]  ? drm_atomic_connector_commit_dpms+0x4a0/0x4a0
[  253.918039]  set_property_atomic+0x129/0x2f0
[  253.922462]  ? drm_object_property_get_value+0x150/0x150
[  253.927960]  ? mark_held_locks+0xf0/0xf0
[  253.932169]  ? __might_fault+0x11f/0x1d0
[  253.936250]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  253.941718]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  253.946847]  ? drm_lease_owner+0x41/0x50
[  253.950967]  ? drm_is_current_master+0x4b/0x130
[  253.955657]  drm_ioctl_kernel+0x208/0x2a0
[  253.959819]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  253.964946]  ? drm_ioctl_permit+0x210/0x210
[  253.971371]  ? __might_fault+0x192/0x1d0
[  253.975452]  drm_ioctl+0x507/0x9c0
[  253.979022]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  253.984138]  ? drm_getstats+0x20/0x20
[  253.988130]  ? get_pid_task+0xf4/0x190
[  253.992138]  ? proc_fail_nth_write+0x95/0x1d0
[  253.996710]  ? ksys_write+0x241/0x2a0
[  254.000615]  ? drm_getstats+0x20/0x20
[  254.004438]  do_vfs_ioctl+0xcdb/0x12e0
[  254.008342]  ? lock_downgrade+0x720/0x720
[  254.012534]  ? check_preemption_disabled+0x41/0x280
[  254.017586]  ? ioctl_preallocate+0x200/0x200
[  254.022014]  ? __fget+0x356/0x510
[  254.025590]  ? do_dup2+0x450/0x450
[  254.029147]  ? vfs_write+0x393/0x540
[  254.032880]  ? fput+0x2b/0x190
[  254.036095]  ksys_ioctl+0x9b/0xc0
[  254.039566]  __x64_sys_ioctl+0x6f/0xb0
[  254.043494]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  254.048098]  do_syscall_64+0xf9/0x620
[  254.051943]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  254.057144] RIP: 0033:0x4665d9
[  254.060351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  254.079255] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.086961] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  254.094217] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  254.101657] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  254.109274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.116800] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
[  256.677491] ieee802154 phy0 wpan0: encryption failed: -22
[  256.683185] ieee802154 phy1 wpan1: encryption failed: -22
[  256.882866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.890415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.899171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.906798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.914523] device bridge_slave_1 left promiscuous mode
[  256.920266] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.927925] device bridge_slave_0 left promiscuous mode
[  256.933375] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.943164] device veth1_macvtap left promiscuous mode
[  256.951142] device veth0_macvtap left promiscuous mode
[  256.958185] device veth1_vlan left promiscuous mode
[  256.963235] device veth0_vlan left promiscuous mode
[  259.955635] Bluetooth: hci4: command 0x0409 tx timeout
[  261.398029] device hsr_slave_1 left promiscuous mode
[  261.405395] device hsr_slave_0 left promiscuous mode
[  261.420985] team0 (unregistering): Port device team_slave_1 removed
[  261.432616] team0 (unregistering): Port device team_slave_0 removed
[  261.442328] bond0 (unregistering): Releasing backup interface bond_slave_1
[  261.454259] bond0 (unregistering): Releasing backup interface bond_slave_0
[  261.484210] bond0 (unregistering): Released all slaves
[  261.501594] IPVS: ftp: loaded support on port[0] = 21
[  261.603910] chnl_net:caif_netlink_parms(): no params data found
[  261.695268] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.702688] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.720968] device bridge_slave_0 entered promiscuous mode
[  261.734287] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.741995] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.755231] device bridge_slave_1 entered promiscuous mode
[  261.787030] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  261.797557] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  261.822298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  261.830767] team0: Port device team_slave_0 added
[  261.839036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  261.847734] team0: Port device team_slave_1 added
[  261.869634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.877202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.904236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.923595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.931296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.957673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.969548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  261.977991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  262.005294] device hsr_slave_0 entered promiscuous mode
[  262.011637] device hsr_slave_1 entered promiscuous mode
[  262.019539] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  262.028273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  262.035794] Bluetooth: hci4: command 0x041b tx timeout
[  262.183109] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.189561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.196302] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.202899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.275120] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.292044] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  262.309794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  262.322483] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.332917] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.353244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  262.363522] 8021q: adding VLAN 0 to HW filter on device team0
[  262.381756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.391952] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.398620] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.435243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.444454] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.451100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.466837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.487468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  262.495102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  262.504507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  262.512963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  262.524204] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  262.531992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  262.562311] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  262.581623] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  262.589404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.602696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.616736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.635281] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[  262.653763] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[  262.661184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  262.679725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  262.744276] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[  262.752481] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[  262.762223] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[  262.773976] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[  262.781848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  262.790536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  262.799737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.807974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.818201] device veth0_vlan entered promiscuous mode
[  262.829677] device veth1_vlan entered promiscuous mode
[  262.836770] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[  262.846205] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[  262.858243] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[  262.869299] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[  262.876607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  262.884048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  262.891975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.900458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.911730] device veth0_macvtap entered promiscuous mode
[  262.919364] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[  262.929314] device veth1_macvtap entered promiscuous mode
[  262.937700] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[  262.947594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[  262.958888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[  262.968935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  262.979512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.989122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.000185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.010213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.021499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.031458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.043209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.053409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  263.064246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.074883] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[  263.082806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.091400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  263.099210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  263.107492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  263.115291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  263.127949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.138984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.148762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.158977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.168380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.178330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.188288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.198103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.208158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  263.221068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.232196] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[  263.242755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.251730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  263.262694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  263.378429] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  263.397576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.405093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.430709] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[  263.443229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.450381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  263.453797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.467870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
02:17:43 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x9, @fixed}, 0xe)

02:17:43 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x1fffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:43 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579", 0x24, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:43 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:43 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, 0x0}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:43 executing program 5 (fault-call:1 fault-nth:7):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:43 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  263.568429] FAULT_INJECTION: forcing a failure.
[  263.568429] name failslab, interval 1, probability 0, space 0, times 0
[  263.591815] CPU: 1 PID: 15700 Comm: syz-executor.5 Not tainted 4.19.193-syzkaller #0
[  263.599821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  263.609197] Call Trace:
[  263.611796]  dump_stack+0x1fc/0x2ef
[  263.615454]  should_fail.cold+0xa/0xf
[  263.619358]  ? setup_fault_attr+0x200/0x200
[  263.623691]  ? lock_acquire+0x170/0x3c0
[  263.627699]  __should_failslab+0x115/0x180
[  263.632037]  should_failslab+0x5/0x10
[  263.635860]  kmem_cache_alloc_trace+0x284/0x380
[  263.640640]  drm_atomic_helper_setup_commit+0x41e/0x1110
[  263.646108]  ? drm_atomic_set_property+0x10f/0x1960
[  263.651140]  drm_atomic_helper_commit+0x96/0x2e0
[  263.655907]  ? commit_work+0x20/0x20
[  263.660332]  drm_atomic_commit+0xd8/0x110
[  263.664503]  set_property_atomic+0x147/0x2f0
02:17:43 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, 0x0}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:43 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  263.668958]  ? drm_object_property_get_value+0x150/0x150
[  263.674543]  ? mark_held_locks+0xf0/0xf0
[  263.678742]  ? __might_fault+0x11f/0x1d0
[  263.682818]  drm_mode_obj_set_property_ioctl+0x3b3/0x670
[  263.688292]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  263.693414]  ? drm_lease_owner+0x41/0x50
[  263.697512]  ? drm_is_current_master+0x4b/0x130
[  263.702215]  drm_ioctl_kernel+0x208/0x2a0
[  263.706371]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  263.711485]  ? drm_ioctl_permit+0x210/0x210
[  263.716045]  ? __might_fault+0x192/0x1d0
[  263.720150]  drm_ioctl+0x507/0x9c0
[  263.723709]  ? drm_mode_obj_find_prop_id+0x130/0x130
[  263.728825]  ? drm_getstats+0x20/0x20
[  263.733091]  ? get_pid_task+0xf4/0x190
[  263.736997]  ? proc_fail_nth_write+0x95/0x1d0
[  263.741539]  ? ksys_write+0x241/0x2a0
[  263.745359]  ? drm_getstats+0x20/0x20
[  263.749177]  do_vfs_ioctl+0xcdb/0x12e0
[  263.753077]  ? lock_downgrade+0x720/0x720
[  263.756574] VFS: could not find a valid V7 on loop1.
[  263.757237]  ? check_preemption_disabled+0x41/0x280
[  263.757260]  ? ioctl_preallocate+0x200/0x200
[  263.757280]  ? __fget+0x356/0x510
[  263.775341]  ? do_dup2+0x450/0x450
[  263.778884]  ? vfs_write+0x393/0x540
[  263.782620]  ? fput+0x2b/0x190
[  263.785821]  ksys_ioctl+0x9b/0xc0
[  263.789302]  __x64_sys_ioctl+0x6f/0xb0
[  263.793281]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  263.797879]  do_syscall_64+0xf9/0x620
[  263.801951]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  263.807141] RIP: 0033:0x4665d9
[  263.810344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  263.829250] RSP: 002b:00007f65017a0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  263.836979] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  263.844361] RDX: 0000000020000100 RSI: 00000000c01864ba RDI: 0000000000000003
[  263.851733] RBP: 00007f65017a01d0 R08: 0000000000000000 R09: 0000000000000000
[  263.859095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  263.866372] R13: 00007ffc922e7ecf R14: 00007f65017a0300 R15: 0000000000022000
02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579", 0x24, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  263.901249] overlayfs: bad mount option "redirect_dir=./file0"
[  263.928321] overlayfs: bad mount option "redirect_dir=./file0"
02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe)

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:44 executing program 5 (fault-call:1 fault-nth:8):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  264.111713] VFS: could not find a valid V7 on loop1.
[  264.125887] Bluetooth: hci4: command 0x040f tx timeout
02:17:44 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579", 0x24, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x60, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x2}, 0xe)

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:44 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  264.663359] VFS: could not find a valid V7 on loop1.
02:17:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x2, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:44 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:44 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x2}, 0xe)

02:17:44 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:44 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5421, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  264.890458] VFS: could not find a valid V7 on loop1.
02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0x2000004e)

02:17:45 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB]}, 0x78)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5450, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x40802, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='stack\x00')
flistxattr(r3, &(0x7f0000001300)=""/233, 0xe9)
r4 = syz_mount_image$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000, 0x2, &(0x7f00000011c0)=[{&(0x7f0000000100)="89fdb1a5e993bd1ecad0176ce69ca3fd5552e77e2794b410d26632555b932bb208258cd9e2d25c9d99e91664bf0173192935e550c117cfcde5a5ebec9fddfd26225fe342c8566372de1aa19e04d4ad350b5e94bc0c08be8d1fd9ed7f5718caea43e7eae4cae0e7f703f59ebfae54cbe0188aad18a865f0464152bca569138230f3", 0x81, 0x6}, {&(0x7f00000001c0)="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", 0x1000, 0x3f}], 0x40000, &(0x7f0000001200)={[{'\xaa\xaa\xaa\xaa\xaa'}, {'('}, {'%+'}], [{@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]})
openat(r4, &(0x7f0000001240)='./file0\x00', 0x2, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  265.106914] VFS: could not find a valid V7 on loop1.
02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5451, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6", 0x36, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 4:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x82003, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0xc}, 0x10)
sendfile(r0, r1, &(0x7f0000000140)=0x80, 0xf587)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0)

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5452, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x210)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  265.340993] VFS: could not find a valid V7 on loop1.
02:17:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x5460, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  265.366669] overlayfs: bad mount option "redirect_dir=./file0"
[  265.388011] overlayfs: bad mount option "redirect_dir=./file0"
02:17:45 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x32030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000"]}, 0x2dc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6088, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x2dc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  265.506950] VFS: could not find a valid V7 on loop1.
02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x40049409, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1000, 0x1}, 0xe)

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0x4020940d, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1800003, 0x11, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[], 0x32600)
write$cgroup_int(r1, &(0x7f0000000040), 0x43)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x600c83, 0xa1)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl(r2, 0xbfa, &(0x7f0000000140)="7de4e5de82c510f94087731f7391bbef143840b01d2db3784b633944258f42b09cf153f024c7b260389cce9882ef122483a3f2da89018b3e2840145ae33e3b71b7057574c3aac4a0e1715651")
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:45 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x40000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  265.728136] VFS: could not find a valid V7 on loop1.
02:17:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0045878, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:45 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x54010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:45 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce254", 0x3f, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  265.922340] VFS: could not find a valid V7 on loop1.
[  266.205816] Bluetooth: hci4: command 0x0419 tx timeout
02:17:46 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x2dc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:46 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x60000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:46 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x1fffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0045878, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:46 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00007bd000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0xa560000)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000500)=""/24, 0x18}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f00000002c0)=""/13, 0xd}], 0x6, 0xda1, 0x3ffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
clone(0x8400, &(0x7f00000008c0)="528ccf9e30eec6e99e8903613d8cfebd58e9f47c22da35b07b6b69890a4c8eeb54d03d31d381a0cb0fb8eb7e3193a060f40a38a93332e922ab46bc97a0fd77b5491bbf1e7440c597ff415be0cc5be191c8d558675e535661dac2c9ddbc3ec592191629ca2e99053fa40dac010f4a6feb70430c6765ad446a", &(0x7f0000000540), &(0x7f0000000940), &(0x7f0000000980)="aafb7f79a3b08ccf01bdebe344ee60477ce37c9ccd2e66d7c6f5462222099d33a1a61306692220f28afe9770a3ca161a5abbb5ec4ee6ae62498c9bcfb88fe39ac7a67edf4b52e271fb860b9116e5991f5dbc2fc967ff064385b630e9a98646f3eaa84d120547fdf21ee2c4178cfc073f587fd98be5920cab5cd0a9")
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000c80)=ANY=[], 0x32600)
write$cgroup_int(r4, &(0x7f0000000040), 0x43)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe0, 0x6, 0x1, 0x81, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_config_ext={0x0, 0x4}, 0x2000, 0x25, 0x3, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x0, 0x7}, r3, 0x1, r4, 0x1)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)

02:17:46 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:46 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800"/714]}, 0x342)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:46 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864c9, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

[  266.549507] VFS: could not find a valid V7 on loop1.
02:17:46 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:46 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:46 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/714]}, 0x342)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:46 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  266.650400] overlayfs: bad mount option "redirect_dir=./file0"
[  266.669643] overlayfs: bad mount option "redirect_dir=./file0"
02:17:46 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x95020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc0189436, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:46 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  266.806127] VFS: could not find a valid V7 on loop1.
02:17:47 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@deltclass={0xec, 0x29, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x5}, {0xfff1, 0x6}, {0x9, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_atm={{0x8}, {0xa4, 0x2, [@TCA_ATM_HDR={0x9, 0x3, "53dbb393d8"}, @TCA_ATM_HDR={0x39, 0x3, "1ebd1bc6c317361e30be010662097af221ba8b8db7b190655d213676b3c81e1f16c8aae9b5303530c5a06463f95c87b6feb6e08bdd"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x3}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x8, 0x3, "920dc1b4"}, @TCA_ATM_HDR={0x30, 0x3, "d808d79abc09ffa9b896344a53045c4ce5ef2638d01c829ba86fd8d4167970b2e2312814484526d9dec8b769"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r3}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x80, 0xf8}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0x1a)

02:17:47 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/714]}, 0x342)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:47 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb10b0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc020660b, &(0x7f0000000100)={0x1000000, 0x12, 0x1d})

02:17:47 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b41000002", 0x44, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:47 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x375)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  267.472147] VFS: could not find a valid V7 on loop1.
02:17:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x970000, 0x12, 0x1d})

02:17:47 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb20b0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:47 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x375)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:47 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
close(r1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/424])
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x9c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x1, 0x9, 0x8000]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f7}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500040000006eb786f1bd8568269ac0d74821dcc2d03c9d5945bf57ba580d1b477be9fa3b0f741c4c7f0a5e18b1d96565a70c2d98f9daa222ad6c5ba6d923db8e655d97ba57bee3504c4da173e8b326"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa0, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2948}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048045)

02:17:47 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000002, 0x12, 0x1d})

[  267.675300] VFS: could not find a valid V7 on loop1.
02:17:47 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e617400"]}, 0x375)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:47 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:47 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000003, 0x12, 0x1d})

02:17:48 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/791]}, 0x38f)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:48 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:48 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
listen(r1, 0x2ea1)

02:17:48 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xe6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  267.931572] VFS: could not find a valid V7 on loop1.
02:17:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000004, 0x12, 0x1d})

02:17:48 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273ee", 0x46, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:48 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:48 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:48 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x88)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000005, 0x12, 0x1d})

[  268.113079] VFS: could not find a valid V7 on loop1.
02:17:48 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf89d0300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:48 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x480041, 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffff7fc, 0x350040)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  268.275752] Bluetooth: hci4: command 0x0405 tx timeout
02:17:48 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/791]}, 0x38f)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:48 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:48 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000006, 0x12, 0x1d})

02:17:48 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:48 executing program 4:
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000080)={0x0, "71698f33c5f1563913b81ddee52a86cb"})
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:48 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffff1f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/791]}, 0x38f)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:49 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  268.848472] overlayfs: bad mount option "redirect_dir=./file0"
[  268.860678] VFS: could not find a valid V7 on loop1.
[  268.866587] overlayfs: bad mount option "redirect_dir=./file0"
02:17:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000007, 0x12, 0x1d})

02:17:49 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:49 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa"]}, 0x39c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:49 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x60000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x39c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000008, 0x12, 0x1d})

[  269.080827] VFS: could not find a valid V7 on loop1.
02:17:49 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3", 0x47, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:49 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x88600000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x39c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000009, 0x12, 0x1d})

02:17:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x43400)
write$cgroup_int(r0, &(0x7f0000000440), 0x12)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x5, 0x4, 0x8, 0x3}, &(0x7f00000001c0)=0x14)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/153, 0x99}], 0x1, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:49 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:49 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  269.738369] VFS: could not find a valid V7 on loop1.
02:17:49 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000a, 0x12, 0x1d})

02:17:50 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:50 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:50 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000b, 0x12, 0x1d})

02:17:50 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  269.965638] VFS: could not find a valid V7 on loop1.
02:17:50 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  270.355751] Bluetooth: hci4: command 0x0405 tx timeout
02:17:50 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000c, 0x12, 0x1d})

02:17:50 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:50 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffff1f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', &(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x100)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000006280)=0xe8)
r4 = getgid()
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0xee00)
r7 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
fcntl$getownex(r1, 0x10, &(0x7f00000087c0)={0x0, <r8=>0x0})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r10, 0xee00)
stat(&(0x7f0000008800)='./file0\x00', &(0x7f0000008840)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
sendmmsg$unix(r0, &(0x7f0000008900)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)="931039235f1d7ccff4675154cac96e430ea7fc1de9758ec29c73690c2d10796f1771a99c9d303dfea8d632948e8c3a4b58953962cee43f08e2cb55e7edc1feddb3f6524f62101dca7374e0d7f7369e4c7a28bb87d250ae4ffc1ec7e0a956a18d0ff8277b81931df2a1fc93bd39498c4869cb662dc77cc0d4f5520708239fa076ffaa9727", 0x84}, {&(0x7f00000001c0)="328c18b7efadf6b07e673213e0b63c43722bb5e1bd7eff9c8fba2f51b2", 0x1d}, {&(0x7f0000000200)="65587d30041b2c2452eac70a33a6804d3844a383fa8d0ec6177c9da58bb8b68d68c754803fc410a2f635f28a89b10394c9aedddb234168c98d7bfa38bc37e2ac257edf4bf0cd207121787ed38c0ed5237a2d57d5cdd670c7647fb2fdb55977f2a9c0f70ed5475de8af784859e5c8e22d8a4a5bee7c34346acca6b1b7aa44874ae2d2b7a23cee3a17d604fc9b1d6cb9", 0x8f}], 0x3, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x90, 0x1}, {&(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002540)="3080ac84ddf7c9411a7d927d3ff85282f220a1a22da7bc9517bf9644c402f8fe15032c5840af607c2fb7ef4beee70c9364fff2a1ed8858b13549f5b202383ba038cb3b4c97c950c16dfe6f26915e371e0e17749483d118e7ca57af9ba3b9ca7a07f23c5e17215b7826070963db60233f07000df207c2b5cc44b065cdff6efe941cd628b02bdb01", 0x87}, {&(0x7f0000002600)="e0e5296c5d21aef88a4479ae778b76307d027efca8b443efa72fb85e955d7e0dc301ef2ae3716c194012", 0x2a}, {&(0x7f0000002640)="92300be5580188ddf7a061ab95cf2305af14", 0x12}, {&(0x7f0000002680)="259b1be21096cb9509aaa879859e90232b6a86eeaa7c1765f4887fb2383305cd96abf496fb3a8853d53e514da7465161a98a2c9de8b1d2942de51efcabca68052960658e94a8491e044d2c0849cb3066090bcb51f8bf0fdad739cd266fcf6ca01e", 0x61}, {&(0x7f0000002700)="b850868e3194532ac780ebd42cb1faa8a1fd1261ad3636e23e4088cdf72fc018ed805c9934b8511dfc01f9bc21f41f5147bf08aa062073b131a7f97f7dc1709b825a7aa663be5521000b9fe71a9233768067933263572d19d17b9d690dc1f719dfc36a307da38f229d30a077d47c546aeebcb9ecfbe2ba17baaf50a82bac94743cb5cac6b57c81dc9ef0af877c23f2fb21ef0f0ae05075f59495885044bb489d56a3ffb67c612064b7f20264a952bf24dcb0130839b405309062bca5c935ce22d3898e97952e18674d46a32e8db3430944f3e39e6ba25645a4860c47eeff010b55a6c7afd38b5e8383ff1a40cec7e49ee44878db", 0xf4}, {&(0x7f0000002800)="d042719d6571565221edea419424f7a7c4f8a0eed1a3ef814fec19c73e9bc9bfbc510f92b1b2b1842a305915511e04ae125bbd2202599ab6f1999a053991fdf96c9b8e7e39b573", 0x47}, {&(0x7f0000002880)="e8613551c2b68a70c8ebbe8276bf869fafb3bb55c33b85d9ef568dce26259775730881bbbc096262c62da0a249612fe51a1002face64fc210d5632d60b9b628263513dbe13c9856f6a4af461f5269c667813e1e710f5a8e3a8548ae8a063f9fc2ee217cd951cb9a5fa6387be434f65737e54", 0x72}, {&(0x7f0000002900)="45388e97d82bd007736d1c66f48db6b1407c610d643ba172ea12117ab847f52b8b9774104792597025b0228406b6237d3586508ade0ed0cbf6a26c013c96d3d83b731981603fdce9aaf535afdd8186c560cc6fd295c8cff845fc9d0550361ca4aae0f8fd6e857d98857d8a756c9d7cec166702a2713c3bdf4f6cdb03ee", 0x7d}, {&(0x7f0000002980)="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", 0x1000}, {&(0x7f0000003980)="00127da8a6c69ed2aa13c70feea88ae7a8bdaa44a456b36ccb204b882ce2892ad23655b5dc2987bd489fda598dccfee3212a996ef18de31b4e4f7457bf425377b94b4a814f1551bd1f432b7bbb5d04c71f2d1d03fc03cac426144c9f1f5bef1d63ac33bc47760aef692fe0cd5752071590a79242b40666851d1412f889908dd08c2daaae36c0fa567ef38ca0e5611c21eefba728d30cd55fb3e7b0236989d4f88c3721d43e19399023087a8c370a092d9161ec", 0xb3}], 0xa, 0x0, 0x0, 0x810}, {&(0x7f0000003b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003b80)="a62f69dd", 0x4}, {&(0x7f0000003bc0)}, {&(0x7f0000003c00)="ef237f20adc3892dff5000c1ccd0a40ae584f71dc8a8c697af5b4f8ac0fff95005a1c64ed51bb3aa57500c32ef84fced521b3ab2b204a0d36f2864fcd725657a4255d6b713cdd4ffe9b98d8414baa2bde451fa7bc25950d13c6b42580fb02ecba51a495db971c77843fdf867bc", 0x6d}, {&(0x7f0000003c80)="ad5fd35f271eee8ada1dd7b9d13c70388415f9d159eed507c59884a1fb3889e035350e6d5b057ece33e9d5e56f7ae16c928985d6cc31e87524f8f5fdc06269b6784a914a234bf422f4d1c1d069d5532455cdf622", 0x54}], 0x4, &(0x7f0000003f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x60}, {&(0x7f0000003fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000004040)="e805021fd5f20ad5be9f0ce27d64", 0xe}, {&(0x7f0000004080)="03480dbc36b3d8334cb147401a9f167cd4fee749ad36598b32795075858846f0b173abba3e48a72f96e2805dcce39b9187d5b862ba049977b1d3b025ea5fa5adc374d43a0457ee1320533a714ecab089349c07e6cbae513e51aca9b430aa1026883607cbe8920b5bd50d", 0x6a}, {&(0x7f0000004100)="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", 0xff}], 0x3, &(0x7f0000004940)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf0, 0x24000000}, {&(0x7f0000004a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000004ac0)="aa975995503a550ba939408762709099ed02560be6adb802210defdbeae58566ea6ea83a955891a66358d16f64212202a1cbcfbf1a190b2c06fa9ab352f146740c2ac36f920c7a53a4e5d3b9e0440ad477d5d78c2567a64f853c6e1b9f51904ac9f25ce5c8e8c8fef2580a20c7ee84f280131848a6d136ec30341cc8fb20063805", 0x81}, {&(0x7f0000004b80)="fb03376a7ec170c72994e5b501a1c5240fda1e05a5b3da418b093c920d6ced8e5edd7d0ecee6c221e5b5f88daa86ac1958d4d5e263ccbbc4491b07584b29b581ead32e115f300b8306938f24ad7f9682318d8aaacadb070e34ede75e91f93f6c2e957df0bc4d2a9128f6170677aa91fa59aeb523323d1d1018", 0x79}, {&(0x7f0000004c00)="d78ff085475c812e4f0669df2101644f57c7ad3dfed6af59c2ed3464e3b14a60a08274c01715d1c482be4fd1c5923cd8d45d494b5c7fb0c4fe6fa1e6b509dc1db39f7379be2529131d5b7ccd5e03123a9318b2fe51712aa06962aff9cbd0512fd6804fd47afad86f0966ed2781dc352af514f4da0a1bf1afae4f32d7b31a006ea590cd74ec13e0e25423a92b777449d507dfb4c196f24d35c3c07e3593913437af9709e2eeb7b385", 0xa8}, {&(0x7f0000004cc0)="45620ef90389ef952adef702efaa87d59cb61c2695cc39d7f4b3a59655ac54c8b5b3ba48802891348370668059a2d5045b2f2fd1b084f4d46a5a26f83455f9328bc954c4b719b3e6d6182de33e31b0ef2ae6a9d0bddabcb89b96d301eb790845994c3e8ddc5051f49b35d391ff4fbce9ffa026bad719529bd45abab4339c95693d9f93db52d9fae2bfc8ac6504cebdb0f1b44856def2cc8cb06509912128554810e91cff8a03c61e81d78f9a92ba48646a378a84bdd1ecad0339a77dd4daaae9126a5c693f312d8b358132fdfa7df942d80d06421f989e4f89339cc1540780bf96f8d61da23a7450e78df83fe7dceed6fb1cbde956ffcb4f46cd1045f11b96795e7a9e66ac0c87232f4a950639c2543b1096f258c3f6e6d55e13a7f5f547b4a79d8b3a0fa7a8e5827ec5ea92c789c81dc3d6baf24df6890a2f86a7d0fe1a129c2df015e4d2514a19e344782c9de7303abe9405e7d223074245b4953cb125f4d2d5dfde367b4386d5106f6cb665b835cc8fb45496d80505d3de6e63e4f02f5b3ff093304a6757b0d5cc61e4657e0fa3a39e2b87f26c4c18671155459c2252f94ed9e7cc4fce8984c6e55f1a2cc45e4565604219c5d719f44b65de58beea982428856c9bdadc857e2aacd9e80040c20e0ecdc3b4bc09c1a5eea24b53f77fb8cccb086a49df177de2e9ac08e360bfc4a96774a0d5f3d142aded0e0db60c5d4359bb34fe2ff77c6eb2caa0b8f8b1af54ca90442fcbcd3d2c5c5b9d29220410a0af7bbceccb1c4ed7ebc1e0790456a444798c5bb78ba9b43875596f91a6cce6ea32f49438208ffa2dab4ba022d4dc94be994830bf254c946a5b2d089bf8fe12bc58759ccc8e0970c2b932213cb785e638fa9088f2067403b51b7a89b606c162ba80eb804afdd4bf6a39894344eebd86c634b76f1f64e1ce5c2b1a30f25918bb77412e6df2f03f0c2033ef803e3884ced342243582b889298a411f5db96106a6cda4deb29fcff516280d8f80386f570da68124c9ac2673f42f205384678d1c9cd52b4cae619f069504a365b64fb158c53d69be8050c128d1e309934fb69a0588150cb950919f5ff797602fc49ea748c7a6a7c4f2be83edc8681cb6034836cc8b593eddfaa0980afe6bb792ddcf271d820ae38788c32febb5ec2775f47c3a595e2503108432d52ee429885de767d18ea8d5c12e115221768fc67df219b167c5f82a38f8c2ce26d1591b8d8a779da232c066f8680c8e25510057981745c832accc9ae0971cc301ad1ce93799407349cd4a2bd744c23a3d4bcb49746910ea15edd7996261a78504373218760f5ea81ef700ebb100c372d9c362136378a3167aeaa9c3a5170413b934cdaf60528fc96fc7bedc9a34930636a8fa1bfbecfde41d608769e671b8faf68ecaa404ecb469cc0c2b4078c97736540c53ad6cb5bafcebd4aabf8c42a54ca08fb156a9eff269e35f64cd7b6dfc69567679ece2c60d1d5c91e1ebce2d308d9960724793c98feb48768e99670ca0ae5da2cba3595add31c6a7d64fd5ebf2d2a2476898d6d37ed8ddfa1d078c77b05a26a6709216976a9d732ed10190f52d40499ee541901eaa11621619c3ba7c278e9c63feb5772ab39aa2b2d26fe1b455d7ab7429ec1879914a1fd6f146263c4fa86db6e69242a62be73f30b87d1f6c7de2c937797794158be4c7a9ac71e29321ccd298a28d457eaa57a631b458614ecd517c4a851c4684b55a9b6122a3542e090a87bde9e92ae908958ad1813fc81a7e91dbf61234a43e30eca1a426bb2056911ddbc5eaf6be35df0e8187836d6ee5bc6875602c869cecf3f380baa7ede4c1c55ed6c91af37506a8536f892c09ac2d0ccb5e6c9f877b63fe7c756a38621098d956008d90929b17301d07e54cbae5166d3fb5f2a76f0810a98f8a8ce43f0d553cb4fa742a722b258918dd660f2ac0dc0950b91d3dd0c1db3512e63bd478c682b4b02d120701f89366e0deed6f58a0b51dbf999aceb64755fadbb724bcb5f66a7885c3606150610cf6cba37dfbf457ab6e24d651df6ef02a0efc76e80579ab31be9e5959fef669adc6f2a9bfd4e469a462479d2bb32f17bd1b4c896697acc06ddcf2a27da11e348c4de70668fc033b70f10bb8a4a620836b5c5262d5fd59848a54bbdda73f879db52946da793d891dc7db95550dde61051dddfe068173356d3258962bd87490fe40026edd297d4d04e8d57e92a4787a4604d0171a2e66c63d4034437459889a7379471cdcfcd31ed4c892cfe4cb31947f5080fd293325c4845d4cc14b08a01324c30d9563354c7082b3a2dc43accad4611d8f6c7841348a97bc465fc7330a1f96cef892a3c727a3a5f6104d119f5a9aca877fae576d86d76441637b62653e28102587c1828d7392a1e93c1acc2cf93723dfe5d3c6c185886c080594ca46e3f6065bc7822b47e9956fd971083d3e9b8e1413bf2809c3828f619033feab9ce02b5acb57bdff5bd6786116458867cc69ba97c5d66cbef7af233f8b185ec19e37e9c7ae539b821b531dc5016d1ef3561ed49c2899f0f086ea1f1c3f93ae2df79b24dfb074842fbadad4833a83d5e1b0f4ba15b49a9dcf00cdd17b0ef35d3b7b8da3634f995ae99c6d2ee0bcd20f39878d2cd9a466e8c002b8f37565e66d95cfc2f0ca5f5e0285aca094aa41c5c222788e3d0018b68d500a223032471179a55ea03fda0a71fff6a44ae1b8a388a4cc66ba8583954a6efcdb2a373b7f4c11daa132f5b2faa58693a3276ceed180196d09d54739bab4114e66cd81e8dd9d378ef69e245dacf8c239d6eb46647559bfb20816a4d13b6daebd00c0b018238a9f1a443f93227af49d16791b23447f50cc997a52288055a60ee2bc11cde3d99b08e9c81ccac78d917aeabaec06ceaeb0eeb0a00d2713d5abc9838794ff4e84a0c677f24d8782621b43b0c46b53c47f8731d9e126b3e1fbfdfdebc6679b41602d265382cf2946629ca105cc0309426d19ac01e29c100fc0a1fc30e6f5f2b93578afb7780e2ae202ea4062fd8cd6bb51fb3b7a7330c70da75d6484f8e20dc602d7f09a96098d7d038794b7ce58271907c6a31d1ed8e644ab218c2d5c6a8821ece6fdfe54012dffcab1276bd0fafe00cd4e30dd0c36b14532f8cebab968abc93b93cc210e1df90b465017479bd74f348ab9e1e459ca0042ec1970046e608303abd520f3bc28ad72cace1176e4a366a629719b3f75df0a1ba1294c0a9c517f64a8fab231d8a2634d0716299c554fb2b61ff46734e2003faaac61573c6f42590fd4427b3493961382db57d7116d1d03d8bf8cdd041381619b418b25063354cde4f87e32cdba0c817f38b9fc59c13fc8b187e894f2bc3d66ef1dcf5a99b4ef43945acbda4b39cc63bf625c23178304bbf326546c05d54daa537bf3dac74c1da8164eff283216971078822c8d1f5ecd654849d8b8a18f511e4118a05694859fd3350d64021fabc13c35de050a299b8b4b44f3fc20848b81dad265b3722924c37064e63ae3009ffc0011a4357d7b5a4d12ec8ffdb645b04c1d12c1d4a02269cc099645045f3f8499a50ab4eb0f144f4f19268b50a187ad42ab42bd38caeca01cdee5f23a4c3d716b9105c028bdf031093f51e5c168bc061fdc1e0219658f69d737905457835ed3065deca26f9b2d28b5a7ce6894f5834b38684ff08914d7d11d3527625fa72244a6a3dc8fdea19e2256994c34c418ac20e28cd625469bb96b8e22a24c8fd25d0e8704f48098b91585bbbef144487c7b5960df386b2cdfabac83524094edcb5e535ccf0c6fbea39f32a0e2289d80d90959c9780c7580175486f90fc575702b3b70b89881deb9a623978ee2404eba66e4bbbbd1fcd6db36f11f8d4581bda3b39992b663ddbca51570b5fa7ec16021b55730670aa86e09b9755d671414c47f974c4e3eca2099558c6e7a90e5115ce9217d186add502b40196c7fd870060d894ef588db4175f4e4a49ae79f1cab342318587323b1c4fd8fe27758ddd37ae5b1e377d9002a226e1a600067b80bc24a353bdc28d3494a061273098eabb852a38887b1abf9ab331d01fff97a37c35f99fe9e1c024ec14506dce93ef0a2ba4146e7f6f04f843094ec4fe2f1081e454297b4c4b45d4e31b155d8d42957deca9234bf7d10126ce3bb8f423d4dc8b05b12cc71f2dedfb4f7109894c5d7f40084daa6cf4e9315da48b0c671dad9944faa96ad0a62e778d7a7b55038535b12db223c0c29069fb01e7b3358faf2b9f5da816cd529a989e63d0aded1976c628d5e11cdc18854ccee41df8dd4fc281743c2b05eed7c21279d6c7fe2c1f0ea110e4ec6f3765e08cd3f54a0bc56366ab4f8cb1d64032d0dda7663ada629660ec85e570403e61823b755743455f97a0b3dc46aca62789bf794c3f712ecf70e3ccacc704f50c6a975bf76cedefd361627c358a8d244a2451035f4573c686ce8eea015581db69ae53b0f889453826ec4cc1b472ff49f03afa3fd102ca233ae52df4bc83fae99991a1298bbba3bd420f106fcdfffad33272943c9487abcd444a4190e6bfed7be7173943785839187ef3933e72d8d4cb99fbe7c6e76a2b06ef7612b4568b7f2f7267f67716f7dcb284d0a4ed817d0cc678588a45f009057e65f38a59f3c481a1559a087fce6b54a7a9c74379f027087ae4d9a92ad95664d540dec50af11528825ce18b891df35ed5e9c6813829ff08e14aedc43c388105177978c2889423d4cda08b7c6a091da416a4b3fd6c4c3dd1964259c6f541e5f1ca35fb2ef68a5d97f8ee210e845d28d18ac42837db75bb282ac3ae8268d2a531f093e4f82a79bc9aee0cef13a981035cd304d1083d63f310451d9b23eaf3339585111513b24f81aaad951e7267dfd3b4f104d0f524604d401f8cfd5f73b6c040441e693fa94a8975151bcaedbefc2f4addad5449d94462f5d71bc0f90968646c89864d9772389e8cf93a096aeccf2a7379cbdd9533363adfa89abeb34c4c0a12e21002233a5b7e26300260298b6cce44be7289d866e4f985ae7874c7f67b1ddc6e20f614c2b9f874b2d7e9b2ea887dd1714c6e7c5e5febce8362f3100316987eb3e96efc4255dc22c9b3db47cf3e20444a9718a461e64c4a92103b140addd9bb81202b8a16423d4abdaed79685d95fdedf19f87ca322b55376c0b033785b25270da9c2d948b0521a6f80b42b566e1cb107540a8047a73b82db10ddbcbb1fcbedbf6975bd8e12e4435eb69fc699324678f52cb1c8e008fc37d2375487be9741028461f8ada1eb75324c8a144956d094a023a570e57523d7adcf496cce3cf46ff5c19c2c4e5b2ed63e5f856f81f192adac8375c30f4bf537e87d3424493bff894dae5ee9c251c73124794a3bd84ef7ffc754e12061e12a565158b2a69cce13088b8908b41abf16c2756cc5b1b8305ea4365b51b424979b9ec40ebecfb0aa44b374c0e75f12d2e9cf0b30fb697a36faf35b03949e5c8dbf62a29b123e1137c843aeaa4e2172983667ed903c28bad2662281555873958a4d5aa83f9757f26fec4e352faddf037dc85b47a0684c39517bba0b00c43afaf347b943654d44e063e773242a702693146b8bf923568d47c5c8b3d2927356e209bbf47a85a88d85088f3410bee04bb8533d90f515f335d8e4e778dbd6ac99c4235d139005eb0c8d1c0c12854408adab5f21beb5aaae5d165f405132faa29459a24e4f1b4bfaa95a85352832bda889855eddafe58d9ba68c191fa47a528f541e22af0750a16699bf8f0f4843d5be20d9bc6aaf6b6d13905598fd5de628dd529d5f220ca9813db", 0x1000}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000500", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x148, 0x8000}, {&(0x7f0000006440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008740)=[{&(0x7f00000064c0)="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", 0x1000}, {&(0x7f00000074c0)="d9731e2500e54ee1019a1633dac102cb3a790be92aec7109631c0aa4474207fbb2689490e448767d64386af9aedf9ac357beb21eb38b00ff2941e09f8f8403259c5dfa9aab51773207897a8bef37aeee70dfad98a04eb29062a9b9892c80167f6bcc81d8003e755c3ab0cdd0141a53875cbf238d84c3fb22321e580665587fd7923253af8c95c600c3c35d11ac28", 0x8e}, {&(0x7f0000007580)="b815d39aa9581a8645bfaac2f29fd79dec41282ced7392681c54e3d57cd21ee454ed6af0ef3ebf7fd4af89920ef092cea0aeeb2500b1625e59099578bb60dd39d609a7d699bb24f0758a3f2c0ba0d53685dad135a9686cfa68bc50adfb472ab787359732a8fd59ea8c3416f13c2bda058e7167eefb54fbf0ed59cbb664", 0x7d}, {&(0x7f0000007600)="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", 0x1000}, {&(0x7f0000008600)="94964967e644a2586fc0c6859093273cebd118b0310a42f2a685177348b9014474e97d015964f69931b145bb3ac4dbe3b0c4d54417a08e5d5c25a78693035c43998c1d6c08996230c719ca911f0423fd666338d8b6e2070e5bf4bb36e9a3d14f64e3b2e78e19de7b77afc074b180431ff48f115597a31782c7b07cd60447da4a36a6703d", 0x84}, {&(0x7f00000086c0)="55800222990e6386cde14bc1990616792d4a5b757aacc751b9ae1ec1b1b264c65dfa30eb82bdc9d5e2ef42989c9ed26f17636bc8a9699e3a8e16bfd680e3a7167bec093f54435366cebb4877fa6d94cb1959271c8820131c5e2bd8371a716c36a2fa1a3ae19670c2ad4fd2df54a84b5857afb4291c0f5e9b93a5b69c5056f53b", 0x80}], 0x6, &(0x7f00000088c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}], 0x20, 0x4000800}], 0x6, 0x4000000)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  270.658481] VFS: could not find a valid V7 on loop1.
02:17:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000d, 0x12, 0x1d})

02:17:50 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:50 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:50 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, 0x446)
splice(r1, &(0x7f0000000080), r0, &(0x7f00000000c0)=0x394, 0x9, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:50 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000e, 0x12, 0x1d})

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"]}, 0x3a5)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  270.896254] VFS: could not find a valid V7 on loop1.
02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
write$cgroup_int(r1, &(0x7f0000000440), 0x12)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x488100, 0x140)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"]}, 0x3a5)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000f, 0x12, 0x1d})

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6088ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x34000, 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x53)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00"]}, 0x3a5)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x401000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000"]}, 0x3a7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000010, 0x12, 0x1d})

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800001, 0x40010, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x4000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000011, 0x12, 0x1d})

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a7)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800000, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)={0xd3db})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000012, 0x12, 0x1d})

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616e616d653d5bc6215d2e2c6163636573733d636c69656e742c63616368653d6d6d61702c666f776e65723e", @ANYRESDEC=0xee01, @ANYBLOB="2cb78dbf85e2666914cbd9f08c96fc8a5c8d480d7beb5721fc6debcce2bad5708afc4d1787daece7eb7fb324cc12cf0db182c34fa1729afd8d6852c91770e3cda64ab928bdcd7ba4dfd28caa174ea7d49d08d021dc2fb1597dab7c7fe8a6d107e0879a71c7a37cf424fc5c023e65d0203c1990bc22edc32a1c95be98d6485cbcbabab3c6fa7fc1c5", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673726f6f743daaaaaaaaaa2c6f626a5f747970653d23282a232c736d61636b6673726f6f743d5b2a2c657569643d", @ANYRESDEC=r1, @ANYBLOB=',\x00'])
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300))

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
write$cgroup_int(r2, &(0x7f0000000440), 0x12)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x100, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, 0xe)

02:17:51 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, 0x0, 0x0, 0x64ca4, 0x0)

02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000013, 0x12, 0x1d})

02:17:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:51 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:51 executing program 4:
r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x629, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="dd002abf9d7ebf7038d2d472a0d7e0142e69c64da56edf85c0f5fc1ba35049bd1d9c53c16f52bc4059d43ffe59f148c57f26bbad0963c910f7aa8d0ef7aab833252cf217168f41dfb533bb5775f8d03d83676bc9cfad1bbb6255ee87281cb3de3237ed5588dc507f87e406a1d53047ec80150dce481a959e6dec9163a78f7e1506b07eba33bd98c4c05e8988e541f6410df1251d91e97f75e02ae63f18c6a9b5b06db8d9bf7c9538245cf4865c0df9e0e3e587e9ee66dc0e95cd1129dbbf1c", 0xbf, 0x1f}, {&(0x7f00000001c0)="86074855f573414109ac321116530d23b6b6c891b124423a2cc11f3b08b8523b4673acc86b97331f4aaf69ed60277991373c31056df59a6d93c994a9b93d0abf3453bc82818b1b23c38dfa3f11f109a59422d50ff5ae01957cffb2284fcadf4e4e7ab908b7965d4d0a0c8cf9fcdb12083c3a84aeebfb9463a761629335da0596f34a80", 0x83}, {&(0x7f0000000280)="bc8a50bcddfc0e1e9bff68bcc228938ce3bccc287a5f7562362f1dd22c9c4a3e66b5f984388d4044e090b7abdfc6", 0x2e, 0x8}], 0x2100000, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa2c7375626a5f757365723daaaaaaaaaa2c646f6e745f61707072616973650300"])
r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x800)
r4 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000400)={{r4}, {@val, @actul_num={@val=0x2b, 0x3, 0x6b}}})
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  271.775513] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:51 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000014, 0x12, 0x1d})

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:52 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, 0x0, 0x0, 0x64ca4, 0x0)

02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  271.916438] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000015, 0x12, 0x1d})

02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3203000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800009, 0x10, r0, 0x3ac1c000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6)

02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, 0x0, 0x0, 0x64ca4, 0x0)

[  272.124600] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$kcm(0x29, 0x1, 0x0)
preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/44, 0x2c}, {0x0}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/17, 0x11}], 0x8, 0x7, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040), 0xe)
r3 = socket$inet(0x2, 0x800, 0x3c)
shutdown(r3, 0x0)

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)

[  272.183359] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000016, 0x12, 0x1d})

02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)

[  272.348223] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:52 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x8c00, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:52 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0)

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)

02:17:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000017, 0x12, 0x1d})

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x5401000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  272.432973] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  272.439188] Bluetooth: hci4: command 0x0405 tx timeout
02:17:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0x3fa)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
r2 = socket$inet(0x2, 0x200000002, 0x0)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x51, 0x3f, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="5a9a37df3defc1d56799aec50e49"]}, 0x98)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000080)=0x1)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  272.594929] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:52 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000018, 0x12, 0x1d})

02:17:52 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0)

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

[  272.674748] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:52 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:52 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

02:17:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000019, 0x12, 0x1d})

02:17:53 executing program 2 (fault-call:7 fault-nth:0):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:53 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x9502000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_mount_image$qnx4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x53, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="cdebee0976cf65d76af5fbe92bab0cfa42499b296b0b81cbfbf5666eb57677592f97abe8dc291b35b9afc0c63ee558041174ab6a0bd47d62c9bab2b4de7532cc46c27142be3290ac7b4c0d9c542337d416baac3f2fd588cb8f4bdf31131c8e5d69877a541c06f7ad6072de76c20cf5648205f62e0482fef46417e0f6090161c73faacf7a83", 0x85, 0x40}, {&(0x7f0000000200)="b075ce1eee91afe10bf9f3526d7af6b7ae5b1045668bcae629f11b9df37b24a61f08b32dbd4c7e89969c30f610a3e5eb73f99c17d1fd60f50035d8b0e3aa3d198ca7f6c531872ba4634e4121f9072880aa7c083ca0703950f2126c37e748898110aa76ed190538684faa5bd414416acedb7d67d945170477ae1c6cdbe06888820ee0cf4dbd7d5e6e9f0d97f71820d3db6c29b88c5593766b50aa", 0x9a, 0xa1a}], 0x20000, &(0x7f0000000300)={[{'+n'}, {'-'}, {'%'}, {'\xaa\xaa\xaa\xaa\xaa'}], [{@smackfshat={'smackfshat', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@uid_eq}, {@audit}, {@measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]})
tee(r1, r2, 0xfba, 0x8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x2, 0x300)
write$binfmt_misc(r3, &(0x7f0000000080)={'syz1', "9c97518bd02e"}, 0xa)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:53 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  272.956366] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:53 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb10b000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0)

02:17:53 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100001a, 0x12, 0x1d})

[  273.060156] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:53 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xb20b000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x6000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100001b, 0x12, 0x1d})

[  273.171168] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:53 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xe600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  273.261311] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:53 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:53 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000080))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="f1907592e71714782f64a2cf033d0f77318df589e61eea5df8e6962f1aa60373428b4ffce899fb5be7278a9c2745aa3597f037c6fa54b709fa0b89bca8aaab17e0ba45d02fa7a02a6c4fb7320113f28f62a751b43063c24fd2038bc2799b3da0d01b85c0a0876c", 0x67}], 0x1, 0x8)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
dup3(r0, r3, 0x80000)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:53 executing program 1 (fault-call:1 fault-nth:0):
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:53 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100001c, 0x12, 0x1d})

02:17:53 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:54 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:54 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100001d, 0x12, 0x1d})

02:17:54 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:54 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xf89d030000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  273.954982] VFS: Found a V7 FS (block size = 512) on device loop1
[  273.987231] FAULT_INJECTION: forcing a failure.
[  273.987231] name failslab, interval 1, probability 0, space 0, times 0
[  274.048635] CPU: 1 PID: 16998 Comm: syz-executor.1 Not tainted 4.19.193-syzkaller #0
[  274.056562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  274.066117] Call Trace:
[  274.068756]  dump_stack+0x1fc/0x2ef
[  274.072407]  should_fail.cold+0xa/0xf
[  274.076859]  ? setup_fault_attr+0x200/0x200
[  274.081200]  ? lock_acquire+0x170/0x3c0
[  274.085232]  __should_failslab+0x115/0x180
[  274.089488]  should_failslab+0x5/0x10
[  274.093310]  kmem_cache_alloc+0x277/0x370
[  274.097563]  getname_flags+0xce/0x590
[  274.101657]  user_path_at_empty+0x2a/0x50
[  274.105820]  do_mount+0x147/0x2f10
[  274.109646]  ? __mutex_unlock_slowpath+0xea/0x610
[  274.114503]  ? copy_mount_string+0x40/0x40
[  274.118841]  ? wait_for_completion_io+0x10/0x10
[  274.123528]  ? vfs_write+0x393/0x540
[  274.127272]  ? fput+0x2b/0x190
[  274.130524]  ? copy_mount_options+0x26f/0x380
[  274.135037]  ksys_mount+0xcf/0x130
[  274.138598]  __x64_sys_mount+0xba/0x150
[  274.142591]  ? lockdep_hardirqs_on+0x3a8/0x5c0
02:17:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100001e, 0x12, 0x1d})

[  274.147185]  do_syscall_64+0xf9/0x620
[  274.151005]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.156229] RIP: 0033:0x4665d9
[  274.159440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.178677] RSP: 002b:00007fa6b9935188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.186430] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
02:17:54 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffff1f0000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  274.193731] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000
[  274.201016] RBP: 00007fa6b99351d0 R08: 0000000000000000 R09: 0000000000000000
[  274.208386] R10: 0000000000064ca4 R11: 0000000000000246 R12: 0000000000000001
[  274.215667] R13: 00007ffdea6b8a8f R14: 00007fa6b9935300 R15: 0000000000022000
02:17:54 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe)

02:17:54 executing program 1 (fault-call:1 fault-nth:1):
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000021, 0x12, 0x1d})

02:17:54 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffff1f0000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:54 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0xe)

02:17:54 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  274.426048] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  274.570398] VFS: Found a V7 FS (block size = 512) on device loop1
[  274.579611] FAULT_INJECTION: forcing a failure.
[  274.579611] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  274.591604] CPU: 0 PID: 17089 Comm: syz-executor.1 Not tainted 4.19.193-syzkaller #0
[  274.599692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  274.609083] Call Trace:
[  274.611718]  dump_stack+0x1fc/0x2ef
[  274.615374]  should_fail.cold+0xa/0xf
[  274.619251]  ? setup_fault_attr+0x200/0x200
[  274.623587]  ? mark_held_locks+0xf0/0xf0
[  274.627684]  __alloc_pages_nodemask+0x239/0x2890
[  274.632451]  ? __lock_acquire+0x6de/0x3ff0
[  274.636712]  ? __lock_acquire+0x6de/0x3ff0
[  274.640988]  ? mark_held_locks+0xf0/0xf0
[  274.645064]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  274.650005]  ? _kstrtoull+0x186/0x420
[  274.653946]  ? _parse_integer+0x180/0x180
[  274.658137]  ? get_pid_task+0xcd/0x190
[  274.662311]  ? check_preemption_disabled+0x41/0x280
[  274.667475]  ? lock_downgrade+0x720/0x720
[  274.671653]  cache_grow_begin+0xa4/0x8a0
[  274.675729]  ? setup_fault_attr+0x200/0x200
[  274.680061]  ? lock_acquire+0x170/0x3c0
[  274.684049]  cache_alloc_refill+0x273/0x340
[  274.688386]  kmem_cache_alloc+0x346/0x370
[  274.692572]  getname_flags+0xce/0x590
[  274.696401]  user_path_at_empty+0x2a/0x50
[  274.700563]  do_mount+0x147/0x2f10
[  274.704127]  ? __mutex_unlock_slowpath+0xea/0x610
[  274.709117]  ? copy_mount_string+0x40/0x40
[  274.713473]  ? wait_for_completion_io+0x10/0x10
[  274.718314]  ? vfs_write+0x393/0x540
[  274.722031]  ? fput+0x2b/0x190
[  274.725418]  ? copy_mount_options+0x26f/0x380
[  274.729948]  ksys_mount+0xcf/0x130
[  274.733494]  __x64_sys_mount+0xba/0x150
[  274.737909]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  274.742581]  do_syscall_64+0xf9/0x620
[  274.746392]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.751566] RIP: 0033:0x4665d9
[  274.754743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.773634] RSP: 002b:00007fa6b9935188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.781334] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  274.788595] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000
[  274.795893] RBP: 00007fa6b99351d0 R08: 0000000000000000 R09: 0000000000000000
[  274.803249] R10: 0000000000064ca4 R11: 0000000000000246 R12: 0000000000000001
[  274.810707] R13: 00007ffdea6b8a8f R14: 00007fa6b9935300 R15: 0000000000022000
02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000022, 0x12, 0x1d})

02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0xe)

02:17:55 executing program 1 (fault-call:1 fault-nth:2):
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
mmap(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x8, 0x1010, r0, 0x17a83000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000400)={0x0, @aes256, 0x0, @desc1})
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002780)={0x0, 0x2}, &(0x7f00000027c0)=0x8)
r1 = syz_mount_image$adfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x19a, 0x4, &(0x7f00000026c0)=[{&(0x7f0000000600)="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", 0x1000, 0x53e}, {&(0x7f0000001600)="522908f050091025746badc62240caecf31510f1e01437956e137f1c1ecad338a099f60cc7a21367397f09f718ca2cd51effb39195712cba6bb429a7f573ca987d28a8da65fc5b75d8cb78e6d2581675ff1065863c3c91d65d144625683384e09b", 0x61, 0x3}, {&(0x7f0000001680)="73bff08756a803cff2647c297fabc14d0ff31ab1d43cd38f12e6e994", 0x1c, 0x9}, {&(0x7f00000016c0)="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", 0x1000, 0x8}], 0xc0000, &(0x7f0000002ec0)=ANY=[@ANYBLOB="263a2c2c61707072616973655f747970653d696d617369672c6673636f6e746578743d73797374656d5f752c008cf2ab7f8de6338f741ce8d227c9014d11ef32836118e9694373f70297f245ddb287abfad59aba1f491a0f0ec5641cc86fba4e77bf869bc8d7f11f89a28b18c711cc4580356378688e4d89284427b153e8e0ea65e5ad8b9fce9579e7b805e541c96c66cc6a9e0900959aa2b44a9af1000000000000c369d53721eab49ac02e4cdd3a3a2bac8f92ceacb65592711513f5300889141a15ffb3b2ff648ce84f144ec00ad8d7495a255151b8ec889307bfb810366756d9309509a9b616cbe5a5eb7dbcee91954a"])
preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000480)=""/188, 0xbc}], 0x2, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4}, 0xe)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002800)={<r2=>0xffffffffffffffff})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000028c0)=@nat={'nat\x00', 0x1b, 0x5, 0x588, 0x0, 0x210, 0xffffffff, 0xf0, 0xf0, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, &(0x7f0000002840), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1f, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@multicast1, @gre_key=0x9, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0xff000000], 'gre0\x00', 'macvlan1\x00', {0xff}, {}, 0x2b, 0x1, 0x1, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x10000, 0x1, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x19, @ipv4=@empty, @ipv6=@remote, @gre_key=0x1000, @port=0x4e23}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x18, @ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x8000, 0x2, 0x0, [0x81, 0x88a, 0x1, 0x8887, 0xb97, 0x8000, 0x9d1d, 0x0, 0x101, 0x1000, 0xffff, 0x5fc7, 0x1f, 0x3, 0x9, 0x1], 0xa}}, @common=@unspec=@cluster={{0x30}, {0x10000, 0xffffffff, 0x2cc}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@empty, @ipv6=@mcast2, @port=0x4e24, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8)
clone(0x100000, &(0x7f0000000240)="44ca77642d724eb4245e118c9b07e907670d985d5f10e1c0ae23043bb2113c2877ef703f8e036bd67fc5e39785d63eaa8ef7e3324525c7f00d", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="997326b3b438d1beb56d7371a1ea05df294766b5f4dc87e02893b9551eae4fb918850f6ac2d2897ce05b68a298698df790fc360e6463fb802a8367091296c988d484bc936736c556e8c2e27e3fdf254267dc2fc44b1f91332b58260a15aacc922afc498e2cb559170e022d37a9efb363f61007a4a51d00a2c5374ab618a5ad8ad18b5b89d9bbcb37acef49bc72c4b1ec53c3dc7f7e26939693187615c90726bab5b2024b0690384baf92ce8ce91e0d9a3b75e89214061f0ee4f68755b737546724ae9d42548b5457f770b19f228a7834ef080499db1c9e45eb7175e64b20836b6115a0f9cf22bb7fd72ecc7a8249d5454dff")
clone(0x40a00, &(0x7f0000000080)="87d08fe9c4e1beb2df2be2106acbcaa7", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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")

[  274.856728] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000023, 0x12, 0x1d})

02:17:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x189201, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0xffffffff88600000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0xe)

02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  275.077657] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:55 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f00000005c0)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc)

02:17:55 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:55 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x6}}, 0xe)

02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000024, 0x12, 0x1d})

[  275.209788] overlayfs: bad mount option "redirect_dir=./file0"
[  275.217551] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  275.231145] overlayfs: bad mount option "redirect_dir=./file0"
02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x1ff}, 0xe)

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000025, 0x12, 0x1d})

[  275.367599] overlayfs: bad mount option "redirect_dir=./file0"
[  275.395148] overlayfs: bad mount option "redirect_dir=./file0"
[  275.402070] overlayfs: bad mount option "redirect_dir=./file0"
[  275.415119] overlayfs: bad mount option "redirect_dir=./file0"
02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, 0xe)

[  275.444405] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:55 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x2, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000026, 0x12, 0x1d})

[  275.531237] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  275.564473] overlayfs: bad mount option "redirect_dir=./file0"
02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  275.606382] overlayfs: bad mount option "redirect_dir=./file0"
[  275.607029] overlayfs: bad mount option "redirect_dir=./file0"
[  275.621256] overlayfs: bad mount option "redirect_dir=./file0"
02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x5, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0xe)

02:17:55 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000027, 0x12, 0x1d})

[  275.741678] VFS: Found a V7 FS (block size = 512) on device loop1
[  275.768610] overlayfs: bad mount option "redirect_dir=./file0"
[  275.778910] overlayfs: bad mount option "redirect_dir=./file0"
02:17:55 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x5, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:55 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x8, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  275.796950] overlayfs: bad mount option "redirect_dir=./file0"
[  275.806637] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000028, 0x12, 0x1d})

02:17:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendfile(r0, r0, &(0x7f0000000080)=0x3ff, 0x8)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0xee00)
syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xdd07, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="85b0e8c7805d2211940de9ca6be2eab39110a805bd79303f3179da53cb", 0x1d, 0x4}, {&(0x7f0000000180)="a244b017d794556ec6506154ff457991dc8b40fecc9d5a3300ff971090", 0x1d, 0xffff}], 0x1004091, &(0x7f0000000200)={[{'h.{'}, {'\xaa\xaa\xaa\xaa\xaa'}], [{@uid_lt}, {@appraise}, {@uid_eq={'uid', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsdef={'smackfsdef', 0x3d, '#$!\x04+\'..+{\''}}]})
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00'], 0x2000, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0xffffffffffffffff})
msgrcv(0x0, 0x0, 0xf0, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r7, 0xee00)
getgroups(0x7, &(0x7f0000000280)=[0x0, r5, r5, r5, r5, <r8=>r5, r5])
r9 = gettid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, r4, r5, r7, r8, 0x2, 0x5}, 0x0, 0x0, 0x6, 0x9, 0x1000, 0x3, 0x0, 0x9, 0x0, 0x401, r3, r9})

[  275.853987] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:56 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  275.932725] overlayfs: bad mount option "redirect_dir=./file0"
[  275.954868] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000029, 0x12, 0x1d})

[  275.996992] overlayfs: bad mount option "redirect_dir=./file0"
[  276.012396] VFS: Found a V7 FS (block size = 512) on device loop1
[  276.021895] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.056012] gfs2: gfs2 mount does not exist
02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x2}, 0xe)

[  276.079165] overlayfs: bad mount option "redirect_dir=./file0"
[  276.102357] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a7)
preadv(r1, &(0x7f0000003200)=[{&(0x7f0000001d00)=""/87, 0x57}, {&(0x7f0000001d80)=""/86, 0x56}, {&(0x7f0000001e00)=""/155, 0x9b}, {&(0x7f0000001ec0)=""/130, 0x82}, {&(0x7f0000001f80)=""/207, 0xcf}, {&(0x7f0000002080)=""/60, 0x3c}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/95, 0x5f}, {&(0x7f0000003140)=""/106, 0x6a}, {&(0x7f0000001980)=""/60, 0x3c}], 0xa, 0x81, 0x5)
preadv(r2, &(0x7f0000001940)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f00000018c0)=""/101, 0x65}], 0x3, 0x6, 0xffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"]}, 0x488)
preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000380)=""/167, 0xa7}], 0x6, 0x1, 0x0)
preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat(r0, &(0x7f00000002c0)='./file0\x00', 0x200883, 0x45)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:56 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.127584] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002a, 0x12, 0x1d})

02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.176783] overlayfs: bad mount option "redirect_dir=./file0"
[  276.200978] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x3}, 0xe)

02:17:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad481, 0x0)
mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x8, 0xffffffff)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom(r2, &(0x7f0000000500)=""/35, 0x23, 0x1, &(0x7f0000000540)=@ieee802154={0x24, @short={0x2, 0x1}}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
acct(&(0x7f00000006c0)='./file0\x00')
r3 = socket$inet(0x2, 0x200000002, 0x0)
r4 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0xfffffffffffffe9a, [0x80020000001, 0x0, 0x80000002, 0x4a6148e1, 0x5, 0x20000582], 0x2, 0x0, &(0x7f0000000300)=ANY=[]}, 0x78)
preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000100)=""/184, 0xb8}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000700)=""/95, 0x5f}], 0x5, 0x9, 0x1)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002b, 0x12, 0x1d})

[  276.277295] VFS: Found a V7 FS (block size = 512) on device loop1
[  276.310141] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x3f00, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  276.349076] overlayfs: bad mount option "redirect_dir=./file0"
[  276.357858] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:56 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x60, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x4}, 0xe)

[  276.391810] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x60, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.461616] overlayfs: bad mount option "redirect_dir=./file0"
[  276.475860] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002c, 0x12, 0x1d})

02:17:56 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xe6, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.515926] Bluetooth: hci4: command 0x0405 tx timeout
02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x5}, 0xe)

02:17:56 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x104, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x300, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.612376] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:56 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:56 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002d, 0x12, 0x1d})

[  276.703845] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x6}, 0xe)

[  276.746517] overlayfs: bad mount option "redirect_dir=./file0"
02:17:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
read$FUSE(r0, &(0x7f0000001a00)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r3 = openat$cgroup_devices(r0, &(0x7f0000003a40)='devices.allow\x00', 0x2, 0x0)
r4 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r5 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r6 = getgid()
r7 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r8 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="21d42460b34bed1c2368830937c2ed440511fa91fb1d054685fccf49399c56b1d2438010f1eeb387ad10575fd717fc82112e8f98fb0e28663a0d823bfd381c9146b4a0c06c18bba72aace9980f5721d823dd832840b87906bc392823db9c4d31905c49c3a729b46e4155e3f3c2880ac8ff566ba582fc5917f63923ef1dab2cc785ea37ea16a4728a6f279547560c1446bf212beb10847ab48434", 0x9a}], 0x1, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0xb0, 0x80}, {&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)="79ebdce441", 0x5}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="1dc7519a844cee2f29103675fbd1974b59f46c1f8f3b7ed82b405b218607f625408d4288120aa341bfc989223209abacd25cf76890eb10b9e72dc30d3637d72fbda63e30b4afd1ca3f2507eab7cee7200094ee32e32704e6a3619033fee4537176ac470a99a080c7acfb7c89e84654f965265df62e065e529e77f3b22f05faaf2b247d0177d401cc12d1e04f0a83aa5b79854df88765ff297f332912ca36a11be91026a83127589f3fdb844a2c8e010c11e1cae2abe85d928eee0274bd8750924c6145914bdebe2f7f543a01d7bd53861122e77b11b338b01b8ce23f9207ea30365cf2fd2f9ed1bc5fd0d926", 0xec}, {&(0x7f00000015c0)="8783ebe869d72b23200848890a3a6fcfb7f11c9e0afb0971197351fc28d39614f8e5edd3fb83", 0x26}, {&(0x7f0000001600)="4cf29367728d53fa2d51a1aedb98c7b734dc274d5e43c4b831719eb54501594b80c5bf02b9cea20bca23f15ce44bd39a19", 0x31}, {&(0x7f0000000080)}], 0x6, &(0x7f0000001700), 0x0, 0x40}, {&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000017c0)="199d12b55703761f4379c13ef66fab986377015e55300b032868ade53efe90742ed6a81ac520186f4154ed75731856f102260a1fda21e3af4041f6e8c813a4693bc8e77557b9063413b87f88c179cdd4531afde144e6008ea398b2cddeb35b1394ca679cfff835bad5517d0df583ccd1152f491e1f3862", 0x77}, {&(0x7f0000001840)="684de81e0380f111180dee9dbbe456b685637c35f11adb8f73861a00b03428ab940c6a29824433518224a8", 0x2b}, {&(0x7f0000001880)="a7cec6ecaa471c5e0af030173f1c6b0158d9817a8fa7ece9d5134f64a4a2f5745ba07e03aa90eff5a30d22b9ae81c87dadd6410d5c05c94e3190f76fbb9fac8b844d19b22f1a84fe953057c9d8ba618ddf6781ef842fed59b7c5b8cbb0ec7bc99e33f98c1ac4193896a9d8918d8244d140ca80b76337", 0x76}, {&(0x7f0000001900)="768201000000010000005891115b87ddbfc2efc51b32a82dc4d0c4a431be9421b6", 0x21}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="0000000010000000000001000000010000000000b8b5500da4f3ea1b5e0319c0ad858f215edde07e"], 0x78, 0x4}, {&(0x7f0000003b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003bc0)="538d52c7276d3cc2326c0a5a12cf67ba63f9f9a803d3c272a659d994fcfd6ec73de1979d893cf519f7673915a27efc1024764b7892a1acb78c1b487211551a7038943fd6f1c82b4970088310651e423236107631e24911d9ffdf69eb9e874eca0065023d278c74a97a61fd0c9564a82e43d32feab0e2317fe154097b0bda5db4273043e71a2df94b4242a85b1ae8ca7c68f7f9ba872a544c360f92c5430926886dcff8476f391439a804d2937b9996cdb2733c2f5dd3a7470eced758c7a1f88eff6564be1d3ce6e2", 0xc8}, {&(0x7f0000003cc0)="2aeae2e6877e255439199a867cc80c50f5392d7928489bf65a166fd5823d1c3ac122e120d9f0b940d182770da1e9a56be3487b2c6966b7bac96acb422b6b", 0x3e}], 0x2, 0x0, 0x0, 0x40}], 0x4, 0x801)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:56 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x500, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.789097] overlayfs: bad mount option "redirect_dir=./file0"
[  276.796766] overlayfs: bad mount option "redirect_dir=./file0"
[  276.812693] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x154, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x7}, 0xe)

02:17:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002e, 0x12, 0x1d})

[  276.876119] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:57 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf0ffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:57 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x600, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  276.963235] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  276.967050] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x8}, 0xe)

[  277.027882] overlayfs: bad mount option "redirect_dir=./file0"
[  277.055874] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x295, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:57 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100002f, 0x12, 0x1d})

[  277.097835] overlayfs: bad mount option "redirect_dir=./file0"
[  277.106722] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:57 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x1000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x300}, 0xe)

[  277.198825] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  277.234899] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x300, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.291628] overlayfs: bad mount option "redirect_dir=./file0"
[  277.299648] overlayfs: bad mount option "redirect_dir=./file0"
[  277.322354] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500040000006eb786f1bd8568269ac0d74821dcc2d03c9d5945bf57ba580d1b477be9fa3b0f741c4c7f0a5e18b1d96565a70c2d98f9daa222ad6c5ba6d923db8e655d97ba57bee3504c4da173e8b326"], 0x24}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
r3 = socket$inet(0x2, 0x200000002, 0x0)
r4 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r4)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0xfffffffffffffc00, 0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x20000580], 0x2, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3]}, 0x7c)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x9c, 0x72, 0x1, 0x8, 0x3, 0x2, 0x6, 0x39d, 0x111, 0x38, 0x304, 0x0, 0x5fee, 0x20, 0x1, 0x73bc, 0x0, 0x7ff}, [{0x60000000, 0x2, 0x80000000, 0x8, 0x1ff, 0x4, 0x7, 0x200}], "14012a185eebb23d11ba6edff80b4eb10bb27d59423dbbf2e4c78ff661422d6937a6199501cb5fdb58a9758d7c514042036aa20eeefdcf1c75", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x891)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
sendto$inet(r3, &(0x7f0000000bc0)="c4d1266f3cdc0ef94af4bfe29a98a5dba2995dfb35c6a345679580463da471854b167e5c6bd259fe054610ef88fe3219a79e413d1a009af8e70d1835a73c77db44b59668fea4c48a9507286013b0666c0c9de48641c1b5a3030e3f43f9285ddf124c0db32dd4705b1535e3a4b3112de86f3027eb9e86c9942f7a946c9a8c923366b4d94d8f6e8969bd29235f735cdec5026b97c4e9c4daa51d3639b28e5fd70ed8c3ab2de7e5caee", 0xa8, 0x800, &(0x7f0000000b80)={0x2, 0x4e23, @private=0xa010100}, 0x3a)
write$binfmt_misc(r5, &(0x7f0000000940)={'syz1', "35de3e633cf3354e807a5ebe37742960a4a29793c84bdbae65ba8daec6d6a61b5495ffb706f897d00f7e8f5029c0dad9188a2c752be694aab17d0f6ac2c402b0bae22724ae41b94f541fd83c382903de08122d0c0cddc89a68d14e3f660524240937b7165da0ce156facb49b8afb5d34c6eb21a152c37a46753a64835fbde36594dcb664b5fd3497ec5d9bc6353f9e62cb5b2085bf3c0214fc"}, 0x9d)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000030, 0x12, 0x1d})

02:17:57 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.342442] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:57 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x2000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x500}, 0xe)

[  277.440540] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x332, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.490372] overlayfs: bad mount option "redirect_dir=./file0"
02:17:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000031, 0x12, 0x1d})

02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x600}, 0xe)

02:17:57 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3f00, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:57 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x30, r0, 0x86000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup(r0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @none}, 0xe)

02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x500, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.661456] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:57 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x700}, 0xe)

02:17:57 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000032, 0x12, 0x1d})

02:17:57 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x8000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:57 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x600, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:57 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.795449] overlayfs: bad mount option "redirect_dir=./file0"
[  277.812937] overlayfs: bad mount option "redirect_dir=./file0"
[  277.819307] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000033, 0x12, 0x1d})

02:17:58 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'bond_slave_1\x00', {}, 0x6})

02:17:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6088, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  277.973830] overlayfs: bad mount option "redirect_dir=./file0"
[  277.989443] overlayfs: bad mount option "redirect_dir=./file0"
02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000034, 0x12, 0x1d})

02:17:58 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.024466] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:58 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x3f000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x2}, 0xe)

[  278.101181] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:58 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
preadv(r1, &(0x7f0000001100)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/67, 0x43}], 0x2, 0x4, 0x5)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.182251] overlayfs: bad mount option "redirect_dir=./file0"
02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000035, 0x12, 0x1d})

[  278.224403] overlayfs: bad mount option "redirect_dir=./file0"
02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x3}, 0xe)

02:17:58 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xbb1, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.315829] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:58 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x55bf0, 0x400)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1f0, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x63, 0x5, "4c989d6c15047c3575f681913ab87a669b57eb77626c588feae2c1ce2b73c62e00078609a0b697b8dabf5c3c75f9a4a95379fd9df490e71ed5074b54a051c9502c5a1bef18c3123b4f6ad16262ec713236377b67ebc0960f598c5f6f2f07e5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "24f67ab2f078b0ff288f35f04cdcb29138505bd898afc590c2319ffd52a5ec88abbc1f7da58cb95436db6fa83049c6063e063f81c42ca5b4b497a3def631c5719c6dc8a3568199b8fb77219c34b771c1b48f08c3d9dbd59173b60fc4043f9f2247c37ade4542"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f}]}]}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "1e023881a7209d65400f6f85ae7562ba087e38db9f8e742276bac167f2aa39399f6d161a8a482a47b91dee38c7a35b4f2538a8981fa56d0a3b1bdcc901a68392b3fef058f8a9d62bba78ec3aef2e9b4c86ab4c9ef46586e4bb71ab003c1764d547"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x44}, 0x20000040)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:58 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x8cffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x4}, 0xe)

02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000036, 0x12, 0x1d})

[  278.409768] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1fffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:58 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xbb2, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x5}, 0xe)

02:17:58 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
mmap(&(0x7f0000364000/0x3000)=nil, 0x3000, 0x3000009, 0x20010, r1, 0xd9c30000)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000000c0)=0x7f, 0x4)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe)
sendto$isdn(r0, &(0x7f0000000080)={0x3, 0x7fffffff, "45c4aca26b405ad71a96fef92cdb0b1e23a66268d186ab51ba00"}, 0x22, 0x40000, 0x0, 0x0)

02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000037, 0x12, 0x1d})

[  278.570517] VFS: Found a V7 FS (block size = 512) on device loop1
[  278.595843] Bluetooth: hci4: command 0x0405 tx timeout
02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x6}, 0xe)

02:17:58 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf6ffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:58 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.697996] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:58 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x7}, 0xe)

02:17:58 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000038, 0x12, 0x1d})

02:17:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x43400)
write$cgroup_int(r0, &(0x7f0000000440), 0x12)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:59 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfbffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:59 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.866484] VFS: Found a V7 FS (block size = 512) on device loop1
[  278.889816] overlayfs: bad mount option "redirect_dir=./file0"
02:17:59 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed, 0x0, 0x8}, 0xe)

02:17:59 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3203, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  278.941539] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000039, 0x12, 0x1d})

02:17:59 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000080)=0xffffff3d)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:59 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  279.043655] overlayfs: bad mount option "redirect_dir=./file0"
[  279.058762] overlayfs: bad mount option "redirect_dir=./file0"
[  279.063121] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:59 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x25000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x5, @fixed}, 0xe)

02:17:59 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3f00, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:59 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfffff000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:59 executing program 4:
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f00000002c0)="c4c1e059c40f0d1e0f01c90f603a66baf80cb88803ee85ef66bafc0cb87b130000ef2ac59a2900000078000f792bb90b0200000f32b9800000c00f3235008000000f30", 0x43}], 0x1, 0x0, &(0x7f0000000380), 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
clone(0x4000, &(0x7f0000000080)="1bb71d935b79adcc8fa0176e3a110b030bd5191356dc588321ffe5af257b0ddf0e549a808d2e674ffa38bc9c401b22080d662a5fd5050d41a27e836abdd3321e52e7861888addcc3915c86b07889e5d22230f90cb357b32e3cf0654cb5c1b0f6b062f2b78afa22adb4ba2ab9b7b5c9bb73e0c248726166ae44cbcaa978f10089cef0770ebe30c4c7caaa3d", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="cb774b0887cb50cd86ac33e79606e72f0a21255d1e20f1420c80cf0427914d12810965ce0e43dd3abace6271911832a4733aaacaf10b9f3641e769c6cd65d45b7b263309511a669787af756b7f671fffdb3125d324965226b33ba81dbced6464bcb969f49c6b2c07563ef71536f883119cb1bc4f14e5f29c828d5d05c12a748f570e64c4660b1ed1e937676a05e78f0d0df5df2f1b1efd53bf1a175257ef237b9faf1eb72dad5ac8914571ce5829121b1d073ede1d3953c0796317eaa7d7e10c3c616131249bc7dcd8")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
write$cgroup_int(r1, &(0x7f0000000440), 0x12)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe)

02:17:59 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x5401, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100003a, 0x12, 0x1d})

[  279.192348] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:17:59 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  279.270677] overlayfs: bad mount option "redirect_dir=./file0"
[  279.288735] overlayfs: bad mount option "redirect_dir=./file0"
02:17:59 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:17:59 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x7, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0xb3c, [{0x5, 0x4, 0xb78}, {0x100, 0x0, 0x2}, {0x4, 0x1, 0x9}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x5}, {0x0, 0x3}, {0x8}, {0x4, 0x3}, {0xf}, {0x6, 0x4}]}, @datasec={0x1, 0x3, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x7}, {0x2, 0x5, 0x3}, {0x4, 0x6, 0x3}], "10c0"}]}, {0x0, [0x61, 0x5f, 0x5f, 0xdafe82fdd2f999c9, 0x0]}}, &(0x7f0000000140)=""/66, 0xbf, 0x42}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:17:59 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100003b, 0x12, 0x1d})

[  279.355904] VFS: Found a V7 FS (block size = 512) on device loop1
02:17:59 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xffffff8c, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:17:59 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9502, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  279.444621] overlayfs: bad mount option "redirect_dir=./file0"
[  279.477050] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  279.483776] overlayfs: bad mount option "redirect_dir=./file0"
[  279.560009] VFS: Found a V7 FS (block size = 512) on device loop1
[  279.605746] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:00 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100003c, 0x12, 0x1d})

02:18:00 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x200000, &(0x7f0000000080)="51c495dd254528bd82b9f9bf5b5aaf7b658f0b7a4efcc4871c614d10bee43e2a035f00fdaaff81d570bde68c0d6ccad2f00b5d005ad1f12b751ee04997fdcd44dd01e8072d2cdfe0c97991916097a5e54db7ad3efce481340386", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b62a")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x5000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfffffff6, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:00 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb10b, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', <r5=>0x0, 0x4, 0x4, 0xe1, 0x1, 0x30, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x4, 0x80}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001b80)={'ip6tnl0\x00', &(0x7f0000001b00)={'syztnl2\x00', <r6=>0x0, 0x58, 0xeb, 0xdb, 0x1, 0x0, @remote, @private2, 0x81, 0x10, 0x2, 0xfff}})
accept4$packet(0xffffffffffffffff, &(0x7f0000001c80)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001cc0)=0x14, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100005400000126bd7000fddbdf2507000000d3113dae62a438132ccf89018292718379f30d177354dac35613f48d30198d92d1bcf6dc9960e997c5ec2fb612d69a7d363725e942a3a672fb0031c15bfcb6aa7c2fd2212c6538dbd143b18ea2c040702184087b5bc9b2", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000e00000010000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="00030300e00000020000000000000000000000000800000020000100", @ANYRES32=r4, @ANYBLOB="00010300ac1414aa0000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="00020000ac1414aa0000000000000000000000000000000020000100", @ANYRES32=r5, @ANYBLOB="01020400ff0100000000000000000000000000010000000020000100", @ANYRES32=r6, @ANYBLOB="00040100ff0200000000000000000000000000010000000020000100", @ANYRES32=0x0, @ANYBLOB="00020000000000000000000000000000000000018edd000020000100", @ANYRES32=r7, @ANYBLOB="00010000fe80000000000000000000000000003d0dba000020000100", @ANYRES32=0x0, @ANYBLOB="000104000a01010000000000000000000000000083670000"], 0x138}, 0x1, 0x0, 0x0, 0x8884}, 0x4000)
r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0)
preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x920200, &(0x7f0000000080)="db516de60891cf2440a69da81f46b97291ab6826494f5015b21e9d2c28a99d1295142a1f48dcbcf5f506f139798a754bcdb0b344b2bad6768adf9ce3496059898ff7d67835ddd3", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1e210390bebcf4db38e8933c123e23ffe865f6b6adbb0adb7c312945bda76629f454ad3f72cd6e85b9801de86ef63897351c2d5bc323390ba2cc1712e80ab221f8809dd62824eba4b8612e909d71ef6797ab5665719518dfa4b2")
r9 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x3ed9, @none, 0x0, 0x1}, 0x66)

02:18:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  280.149950] overlayfs: bad mount option "redirect_dir=./file0"
[  280.153494] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:00 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100003d, 0x12, 0x1d})

02:18:00 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb20b, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfffffffb, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:00 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r3 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10)
ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='gretap0\x00', 0x10001, 0xffffffffffff7fff, 0x101})

02:18:00 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x30)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x7, 0x8, &(0x7f0000001480)=[{&(0x7f0000000100)="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", 0x1000, 0x6a}, {&(0x7f0000001100)="2a9b2624153bc7068197afd44cf50e022f5a8827ab300f5915a1c4c16cfbe00eaa0cb2a51db9869006109b1941ff364df9ca5c2da2bd967ced5e6769a461c8c73ab8c4f56f4a9dada6f6118fae86d80e71db086e379ecc6835236486c6c9b111b876a8c62edd6f2cfdd771e1400935c4677793f4fa", 0x75, 0x7fff}, {&(0x7f0000001180)="a0bd1ee702f33d5edc947425a1723a45d907166f", 0x14, 0x6}, {&(0x7f00000011c0)="be661930ada1d5be4f344308741a5efff02759f41faac72136ac6e81402eba75227968578c6be3fce60d20d92742288b6d0eff33b2479f8e9f18f2e2445cfb94c590b175a1643373196144820a309ce5353a61114f17a840f5245927442a65ba183274b5412caf06e6c510510c8e3bf2f205284e99aefad536ecd2ecd573dccfd54ba352e8770effcd82dfd1059eaaed9efcf43c42ee0b54b174ca12ce535b63db8c954cc4b0cb9655c272f07a5646e9af90a1149ca2d683b8d71c4ce8823db9b1dd95706ce5c08875ffbb07ce77397a6d", 0xfffffea1, 0x44d}, {&(0x7f00000012c0)="7e3e296826cc4ac3427660bf0f1af489c5e7c68b285fdaabb1f2", 0x1a, 0x5f59696f}, {&(0x7f0000001300)="2b408f7239dedc8a504f9355f06ad58156fee278903949766c04d92c21a8abdf829a62d7c9a785a86fa9291339ed19b8d3e1358cb35ea0678a374b511d9fb5950566832d9150ae0589434bbb536be79224abb85820b4c739d0726cfb242500d3898731", 0x63, 0xe93}, {&(0x7f0000001380)="1bf9bdd8cbe0fdfdd72f7cbfb77c722bf5ae874a543298ffb16bbc0d6772258d26ba81c203aca3884035a4494a5cbbaefc", 0x31, 0x89}, {&(0x7f00000013c0)="84eef532c9f28cc297fb07c1182bf444e1f1dd9a887ac7598cb5ef10460412cd71a9dcec5713ef03d56986298a7f6e141a119daaeb16278cdb3e2f86eef869e7ae161b3cd305cf3079c2e58bc279c459896b4897475b63b4ea8fc97f0d7aba8862ddd1592924e1b53e74baef164b4750b892be873121599ff9e6ddc5ac2aa1f2c01e3333b69c4da6825164db6c0c8e0efd3c63a34cd07a08426160194a2c707d886a7d74a92db214da3777a0c80699661e7fd7b55b", 0xb5, 0x40}], 0x20082, &(0x7f0000001540)=ANY=[@ANYBLOB="666d653daaaaaaaaaa2c00000000"])
name_to_handle_at(r2, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)=@orangefs_parent={0x28, 0x2, {{"901b3640236c69e0d3168adf90a4b553", 0x1}, {"9f400bd5ff4ab68188ba7f1173784d07", 0x1}}}, &(0x7f0000001600), 0x1000)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  280.277227] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xe600, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  280.326847] overlayfs: bad mount option "redirect_dir=./file0"
[  280.352927] overlayfs: bad mount option "redirect_dir=./file0"
02:18:00 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100003e, 0x12, 0x1d})

[  280.452667] VFS: Found a V7 FS (block size = 512) on device loop1
[  280.471990] overlayfs: bad mount option "redirect_dir=./file0"
[  280.492244] overlayfs: bad mount option "redirect_dir=./file0"
02:18:00 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc0, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
sendto$inet(r0, &(0x7f0000000080)="db51ffdb606588ce8de035b15c2089e0ef1b54424d6511d2c737cb769ca6943dd9f2365471a0deb1de2990f49975212283bb84bc7a5b30de9180e8", 0x3b, 0x10, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010101}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x568, [0x200008c0, 0x0, 0x0, 0x200008f0, 0x20000a46], 0x0, &(0x7f0000000100), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x11, 0x80f3, 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'ip6gre0\x00', 'veth1_virt_wifi\x00', @remote, [0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0x0, 0x1fe, 0xff], 0x6e, 0xee, 0x126, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7}}}, @common=@log={'log\x00', 0x28, {{0x2, "fde62cba6558831ed7506ac4002a3ac51660cede0de3b17325e709f43f8a", 0x8}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffa, 0x1, [{0x9, 0x40, 0x8808, 'virt_wifi0\x00', 'sit0\x00', 'syzkaller0\x00', 'veth1\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0xff], 0xe6, 0x156, 0x186, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xffffff00], [0xff, 0xff, 0xffffff00, 0xff000000], 0xdd, 0x67, 0xa, 0x6d, 0x4e20, 0x4e22, 0x4e21, 0x4e23}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, 0xfffffffffffffffc}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x0, 0xf6, 'bridge_slave_0\x00', 'ip6gre0\x00', 'veth1_to_hsr\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x2}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffec}}}}, {0x11, 0x2, 0x9200, 'veth1_to_batadv\x00', 'wg2\x00', 'veth1_to_team\x00', 'veth1\x00', @multicast, [0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0xae, 0xe6, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x1, {0x40}}}}], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}]}, 0x5e0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
preadv(r1, &(0x7f0000000140), 0x0, 0x4, 0x66f)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:00 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x7ffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:00 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000041, 0x12, 0x1d})

[  280.570185] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
close(r2)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/223, 0xdf})

[  280.653226] overlayfs: bad mount option "redirect_dir=./file0"
[  280.667837] overlayfs: bad mount option "redirect_dir=./file0"
[  280.675658] Bluetooth: hci4: command 0x0405 tx timeout
02:18:00 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x39df8, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:00 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000042, 0x12, 0x1d})

[  280.754552] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:00 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xe398, 0x6, &(0x7f0000000380)=[{&(0x7f0000000100)="6917f48c03c9cb2f0ed0971506aad10f9d0e47e80ebe575a66e412541300c43b1dce113f5152513f4f16495959a10fd26ff587254ab0f06d83ecc6d072978cf4e62da8a98bb74c22dad61c906212", 0x4e, 0x62}, {&(0x7f0000000180)="b520df3bf46b46b5196f494c539fcc96ec89a8620522be7efd9134a25033043d41f2ee241b587f088949d1c5cff8e9287c6ecb254ee760940c99ef99e5412638d07c98794e86fb83dfa111e1e8eff860668cf14d4c5fd7467aa0cb57737b4d29833ffaf5a6c6a900ec8c6e032b220acd2b732b02bba3f9f30362ba1fea355a1a52298c082bdca2f7522f4d11cdaaa41c51dcbf3854c78d91d180841248f747599f8c7a14d706c0f68560c8f5fba283996c", 0xb1}, {&(0x7f0000000240)="1cb1044eaa02afefb0efbd395dce5cf9658e889fb221c520", 0x18, 0x9}, {&(0x7f0000000280)="810d38e27ef937248836ec80fe5053bd371fcd63bb4dfee1386bcb3a691791988852db9ebe3dbf1ee9d95bca9a397752d38351e4ebdc10cc5c4dba0f64f3312dc7b4d9cb20080a7917af040e1b2dc397269f2e1aeaa09204189fc29df88e1e932230a53785d808439469441de1a930f5393fd2f995bbf426", 0x78, 0x6}, {&(0x7f0000000300), 0x0, 0x3f}, {&(0x7f0000000340)="92f786188c9ca9c710", 0x9, 0x100000000}], 0x2000, &(0x7f0000000440)={[{@noinode_cache}, {@notreelog}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@max_inline={'max_inline', 0x3d, [0x15, 0x34, 0x74, 0x36, 0x9, 0x2d, 0x30, 0x0]}}, {@barrier}, {@space_cache_v2}, {@space_cache_v1}, {@noacl}, {@rescan_uuid_tree}], [{@dont_appraise}]})
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unlinkat(r0, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0xee00)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x26000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x0, {0x0, 0x2}}, &(0x7f0000000740)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x0, 0x0, 0x6b, 0x3, 0x0, 0x8bf9, 0x46e, 0x0, 0x40, 0x0, 0x0, 0xee01, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xa0, 0x0, 0xfa, {{0x2, 0x3, 0x0, 0x0, 0x0, 0xaef, {0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, r6}}}}, &(0x7f0000000b80)={0x20, 0x0, 0x80, {0x0, 0x0, 0x0, 0x76}}})
lchown(&(0x7f0000000500)='./file0/../file0\x00', r3, r6)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:01 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf0ffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  280.836575] overlayfs: bad mount option "redirect_dir=./file0"
[  280.857911] overlayfs: bad mount option "redirect_dir=./file0"
02:18:01 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3f000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000ec0000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  280.887965] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:01 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000043, 0x12, 0x1d})

02:18:01 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  281.026294] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:01 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x60000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000044, 0x12, 0x1d})

02:18:01 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x100000000000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:01 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1fffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @loopback, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff, 0xff], 'veth1\x00', 'geneve1\x00', {}, {}, 0x32, 0x6, 0x3}, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x3, 0x3}}, @common=@frag={{0x30}, {[0x7f, 0x800], 0xfffffea7, 0x9, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x401, 0x5, 0x9, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x18}, @private1, [0xff, 0xff000000, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xffffffff], 'bond_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x4, 0x20, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398)

[  281.068417] overlayfs: bad mount option "redirect_dir=./file0"
[  281.071841] overlayfs: bad mount option "redirect_dir=./file0"
[  281.107651] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:01 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
mmap(&(0x7f0000304000/0x2000)=nil, 0x2000, 0x200000c, 0x810, r0, 0x8736f000)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0))
r1 = socket$caif_stream(0x25, 0x1, 0x3)
preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5}, 0xe)
socket$caif_stream(0x25, 0x1, 0x5)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/163, 0xa3}], 0x1, 0x200, 0x9)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000240)=0x5, 0x4)

02:18:01 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x88600000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  281.239798] overlayfs: bad mount option "redirect_dir=./file0"
[  281.258126] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:01 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000045, 0x12, 0x1d})

02:18:01 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b7474797065000000000000000000000000000000000000000000000000000800000000000000000000000000aabd6d61726b000000000000000000000000000000000000000000000000000000001000e8ff000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:01 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x200000000000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:01 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
preadv(r1, &(0x7f0000000100), 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:01 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000046, 0x12, 0x1d})

02:18:01 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  281.392327] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  281.416641] overlayfs: bad mount option "redirect_dir=./file0"
02:18:01 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:01 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x225e000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
pipe(&(0x7f0000000080))

[  281.549062] overlayfs: bad mount option "redirect_dir=./file0"
[  281.564276] overlayfs: bad mount option "redirect_dir=./file0"
02:18:01 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  281.590182] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:01 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000047, 0x12, 0x1d})

02:18:01 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001140)=""/195, 0xc3}, 0x2}, {{&(0x7f0000001240)=@caif=@dbg, 0x80, &(0x7f00000027c0)=[{&(0x7f00000012c0)=""/116, 0x74}, {&(0x7f0000001340)}, {&(0x7f0000001380)=""/227, 0xe3}, {&(0x7f0000001480)=""/3, 0x3}, {&(0x7f00000014c0)=""/252, 0xfc}, {&(0x7f00000015c0)=""/176, 0xb0}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/153, 0x99}, {&(0x7f0000002740)=""/87, 0x57}], 0x9}, 0x1000}, {{&(0x7f0000002880)=@can, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)=""/191, 0xbf}, {&(0x7f00000029c0)=""/248, 0xf8}, {&(0x7f0000002ac0)=""/81, 0x51}, {&(0x7f0000002b40)=""/170, 0xaa}], 0x4, &(0x7f0000002c40)=""/138, 0x8a}, 0x1}, {{&(0x7f0000002d00)=@generic, 0x80, &(0x7f0000005300)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/164, 0xa4}, {&(0x7f0000003e40)=""/199, 0xc7}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/184, 0xb8}, {&(0x7f0000005000)=""/253, 0xfd}, {&(0x7f0000005100)=""/60, 0x3c}, {&(0x7f0000005140)=""/93, 0x5d}, {&(0x7f00000051c0)=""/227, 0xe3}, {&(0x7f00000052c0)=""/46, 0x2e}], 0xa, &(0x7f00000053c0)=""/171, 0xab}}, {{&(0x7f0000005480)=@nfc, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005500)=""/200, 0xc8}, {&(0x7f0000005600)=""/48, 0x30}, {&(0x7f0000005640)=""/73, 0x49}], 0x3, &(0x7f0000005700)=""/101, 0x65}, 0x1000}, {{&(0x7f0000005780)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/216, 0xd8}, {&(0x7f0000005900)=""/45, 0x2d}, {&(0x7f0000005940)=""/1, 0x1}, {&(0x7f0000005980)=""/142, 0x8e}, {&(0x7f0000005a40)=""/181, 0xb5}], 0x5, &(0x7f0000005b80)=""/235, 0xeb}, 0x7ff}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005c80)=""/77, 0x4d}, {&(0x7f0000005d00)=""/124, 0x7c}, {&(0x7f0000005d80)=""/101, 0x65}, {&(0x7f0000005e00)=""/235, 0xeb}, {&(0x7f0000005f00)=""/44, 0x2c}, {&(0x7f0000005f40)=""/17, 0x11}, {&(0x7f0000005f80)=""/58, 0x3a}, {&(0x7f0000005fc0)=""/209, 0xd1}], 0x8, &(0x7f0000006140)=""/245, 0xf5}, 0x8}], 0x7, 0x100, &(0x7f0000006400)={0x77359400})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  281.634286] overlayfs: bad mount option "redirect_dir=./file0"
[  281.668261] overlayfs: bad mount option "redirect_dir=./file0"
02:18:01 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x800000000000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  281.713255] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  281.745407] overlayfs: bad mount option "redirect_dir=./file0"
[  281.783045] overlayfs: bad mount option "redirect_dir=./file0"
[  281.825517] VFS: Found a V7 FS (block size = 512) on device loop1
[  281.872859] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:02 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x56c00, 0x7)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:02 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x100, &(0x7f0000000080)="c1cbf139217fa659c324d936bcba72c86b0f5e80eb99686717283292f6473cb16e15f571f841b36fb4825993435f0ec12d01d5ffce207509d4a6505eecf8db312131fc7bcfe217b6a8d418482bb7b3f9c5e4f7615255d85c41ff6802313ca35f7ee716ed8f08fc245f41dffc7c3cf3f71b18d3afb1654044cb59ca26344094bbe98ecebcf54e7aa8a1a37b68e5177bf79aa9", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="da74d2e19daec5ce7108c7aa1183f5cb9aebe25f10dccdc0cebcfaeeba620990ed0b0dfc23f45a668a1bc3763e50b599d133bcb5ff8c40c51f589bd412a681aa1fea1ce8a0cf8d3cd628")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:02 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000048, 0x12, 0x1d})

02:18:02 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x3f00000000000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:02 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
clone(0x0, &(0x7f0000000080)="7084abff64e1d6495a040a34e91c24e1b332cf2c7ca1b7e51df3a029e137afe16364ac1d7cc2b2a2f4c3cacdff4a26a01130044ec4ad11378db78a4daca5f0855bcef77bdc6a667406b3fa03f8fdda82bdf2e37bc0de70d3bb668921737474bfdbb69348203c123380afebe0eb63ec61353e86c8e794d5b708222150a88d806cd2c522aba72b77080f05a937c889cbf1ee6fb54ad7b7c29b68c735c73228d69a3b3c40442816844d9392d053b3084cb1692c7cade7be848cb643098d23402c5958b0d0938a4367a76240aaa97136830180dc93e5d99338c3d05b38337748db257763dd90008f2badb620b4af", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="719c25e89ca77ad5044e5ae0b164cdbec89172ec708e815b18cc9b13334a3c6256dbb81ed0b91aa788b57d36e465b367e2e76ddcc38d72e5c4a936a6a9")

[  282.341048] VFS: Found a V7 FS (block size = 512) on device loop1
[  282.351522] overlayfs: bad mount option "redirect_dir=./file0"
[  282.364770] overlayfs: bad mount option "redirect_dir=./file0"
02:18:02 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000049, 0x12, 0x1d})

02:18:02 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff1f00, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x7fffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

[  282.446026] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:02 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
clone(0x40000, &(0x7f0000000080)="1ca791c353b35aed8ae559776680b321443df11fb4cd546351feb735ce93f213e8814464b13d9aedf4d686ac036b27cd7fb12ff8116f22a207481e236549aeff85d9d803f4b792f1e63c6810bf95215dbaada84b9306b38614afec3a4e2d568c7a5a6be133a970d6c74d85672ecbb034b49ae4c08ac77c39bbff09a64eeffe5512623957bc53a74c9e30914b18509caf63", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="00a01e359b5d26fdce961369a6e7813c69262f44233c0c09f68a60d8c1fb16da9ca7982576227be5978d74d38f3b4208bb28d562a7295e00f8f26579c2f4d04ab28fadca7de929df3ffe312d5db2184d524fb3c914231aa0eb87d03b7a43ce9a54434c93455a730948dccd73f6433f5d23544cc64027")
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:02 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004a, 0x12, 0x1d})

[  282.508492] overlayfs: bad mount option "redirect_dir=./file0"
[  282.537326] overlayfs: bad mount option "redirect_dir=./file0"
02:18:02 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x5000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  282.584308] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:02 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_mount_image$hfs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x4ea, 0x8, &(0x7f0000000c00)=[{&(0x7f0000000780)="def4ee09b92772e7f5b59d1239cc231a6bf797ca009fa8c47faab19618e43556ef7b0fc0f8f3d5e8fdecc7b603842bd5cbbfd59e3d2f1690afefa745f1ccfa71c69a85f7f248aad245bc6155ccb2e4d0341a1881a65413513649bc541167b3b52051479e22e954677ada5aa5713518451a74067225", 0x75, 0x8}, {&(0x7f0000000800)="57444ed31a5bd5d5b34ccd57a81a1a273933258c64de737132ce5152e0334a41de6a0740059e3302c5ab0651c8ba9f57f378b71f82de3e47f05c7ae971630e112311c0b417ae530d83a3f7c5f13b9af047fae64439ea6925d7eb0a3c91", 0x5d, 0x8f}, {&(0x7f0000000880)="3832e9b8f7d8719defb922163d049eaa4fa78c8030268499a482736c9d", 0x1d}, {&(0x7f00000008c0)="76a51a0f9c71f606643d441e20b45939575b476d9e97f423a4e80d3b8734c25363df61d6d9fd3f49381d844b31f7c608c2c6ac6e2e632c9e0ac97e6594c7b8f7dad6e8af9ead9fe61822e8e88f76faff301c4caea2046df4c66d731f06a0afa051a6115d30069f822e5e8e56917d5657b345c34973494631c00de595a1f9bf57aa333551f71be7d46b09dbedb3fd8f0ccf33bbb15550b3d137cdaf55ba29d6be7994c1513291d9332645cb377b6fb81ddf8ab30b9d4174a1feef4f27dd2b9e", 0xbf, 0x2}, {&(0x7f0000000980)="e50151e7bd9d7f16bf8bb4b60b728aaf39cec4106287cef01ce68a8405e76437e76b2912e420b15c2d11a1b33a9406673ad5645b96c6661187f4acc565a6eece379fe99333ce5ef7a6e15f53aca76ed258789dafcb18265251c7f2b6a292049349f40f082a8cf51e3e7b1a7a7db7adea2dd3ee05fb0fbfd2d308279560f602345143400993333c5acfe9db67e3201c3de3515cf717d7f2499d6ce626d1eac1dcd0900f32640aea06405765d050", 0xad, 0x800}, {&(0x7f0000000a40)="168a712b40b0328b0077cd71078bcdba33df29d5e85923dd96e8e7e24631a460e4a64639de15f01d06210398a16ce8c7d7607ee90fb0de7da543f98de9469713d69e580c8459650eb10f768de71964559903526de8a7f5b93872f134d56b42927333638de25dd12699c4e25e5b28efd6f801be6d396ab7502842a2efab2eb1172377083463696edaebf9e0f1f5e73ad50e576d01de1d2873b812dff85301", 0x9e, 0x7}, {&(0x7f0000000b00)="518f4698b5cc3fbcd699343efe3d5b04836f8693f7185870aa2563bedfd736548b176c70cf006bd88caf4bb64b52032fac2e047975a1ee1d192407353c1a458ef57680921244478fa016378b4c82f5c82e936f82b5ff75791c6dec3fac5aa336c6a629c0339123f15d690a95dd9234f1ec1e60ee2d15d83a85f06282ecd603acd009c18a35cf00042f1a33d7dfa576562bc392217416c906158cee688601cf90210d0e8444c6", 0xa6, 0x84}, {&(0x7f0000000bc0)="5248a3d857f741369accae", 0xb, 0x1}], 0x3004006, &(0x7f0000000cc0)={[{@file_umask={'file_umask', 0x3d, 0x4}}, {@type={'type', 0x3d, "e10176c8"}}, {}, {@gid={'gid', 0x3d, 0xee00}}], [{@seclabel}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@hash}, {@appraise}, {@appraise}, {@uid_gt={'uid>', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]})
vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="cbfecd6bd615f364b0c48f6845c32205c5823e5dc03c8a249c83db9b2435f6d4529d81858242bcb88c43d3c516a81e5e2aa04ee448d22e3e1f204a54e39fd5bd1d40da181ca06c2b77c38703ca0ce9dab21b718a49a5d738a53d6e86261f21b2cb5d6e3dbff8f99b033b66e99bdfbfffab2e11730f39135de9f843728f557cd0b9d697e6801a4c64cbc1818aa6ee7276f89cf466958af878", 0x98}, {&(0x7f0000000140)="035aac886fe160f2ac4df5dda65658c4301732fbbca7d81a04ebb08af2554ad730f78e76333ec68f3b847066591b47fb2bacf0010a0b1f51c97281d94907b295b1a02b3fcb3e83a55dab2d78264419815e3632eaabcb23278586647abf01f25fa857c262b3bba35b2430a47d3feb0a5a5e0da042581d76fe314cad5e4e68baf879856aa4d53795afbaff7822a8183dacbdd2d4175939ffbafd4834e4b17b5711d30f3d48308f2fef12925a09bbf6a96df6f9d32431", 0xb5}, {&(0x7f0000000200)="b783831472df72c78001a58ea6cc95973169ba79939e2e5ee2fb9bdffc685fa58f79d12b794aee1c524c8841f53d31f7f908e5f11c7f0a49eb0010c14e95db823f11f8225c6975f84a1372df60e6aee6cc1d572660403e64e72b3046c4ac22a41bc3d142713826ab773863e364e9238502c3703d41355ed7fa7024e8cee30f591a7feb17c899c6f06c612ff181e79e052a5cab45aaa53fe60df97c51b62f1b14a5ecd7db2e47f8c8cd4277e2271c674910212ddf50c3504d4059bc8f", 0xbc}, {&(0x7f00000002c0)="164794be25d957b8a56e9157dca5aef82f1d0206c706d71d382f5dea1e0cb81e028c7d8cea076cc1745366b880e2e5ea7378f65d16ecf43c0e04a88623c3539f07782c0d3cf0141629e24ce06c", 0x4d}, {&(0x7f0000000340)="8192cc76e7c5366fda0d4323aa54280af3576df4df151779ca8217f1703199eae528d1368ab8bd1eb433fa6be66b968b1640cb3623103cc95e2c8ad5cddf8f70f49edf7e249a20f179c356fd4c917c57383072f58fcb9eafc4", 0x59}, {&(0x7f00000003c0)="e211211b5f6414bc6c45ad9e0f4757f8628e93fb97953bd6cd273979d16750edf4a1a57bf5da35cc4fe3891b50975bd4a6e91edc059ab554234d475a4240b982eb321721c8619aca7d31870b29", 0x4d}, {&(0x7f0000000440)="348a00366c34c1ac20349a9a8045ced0efcee60b899ab8fb17412052e4515e9362e8c4ffc2a29fdc50cfb96dcfd95a9db65c8f5d7baeb9f5b32f20ed1f", 0x3d}, {&(0x7f0000000480)="644b050d70f9dd711c18de54e465c60a39de66aec3371daa4c28fa6f7436828f3889672d8ace402bc5507f2fe85f78e8f9e1e9d8c5f2cf909df752c3379c562f4ba93154e72d5cb5e70610cef1c371429b", 0x51}, {&(0x7f0000000500)="9da89ad5f21abaaac05700af0659f44c277722f4f0030ce7717a68e5a318271389a2ebeb882efafc92c026e64a4b71c7aad9363f36b734c9f15ccf98eea0bf8af49f7a2cf34c318364d177113c8a7d27ba07d35828b958826664093a358c9704a822f1dbb5648cab426e71ff469855bb3d8b32dd3cb55733836243e3a11dae85382fa4feed", 0x85}, {&(0x7f00000005c0)="95f169b69ed3dd40260886d0c3b10711bf46804f154987c9291e4de487f60f9f7ac855ab53e678a30368859424fb27e8bb6122697880b34e1d9227bcc1df682c943e22552ab42b7df658f54283a4e19fdd068d5f35e781964b8dd407329c6db85e464a96f5b100ec64427fba970ab9c6179e", 0x72}], 0xa, 0x5)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:02 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff7f, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x8cffffff00000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:02 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004b, 0x12, 0x1d})

02:18:02 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:02 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  282.714822] overlayfs: bad mount option "redirect_dir=./file0"
[  282.729659] overlayfs: bad mount option "redirect_dir=./file0"
[  282.735952] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  282.755667] Bluetooth: hci4: command 0x0405 tx timeout
02:18:02 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f00004a9000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x57732000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004c, 0x12, 0x1d})

02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  282.916717] overlayfs: bad mount option "redirect_dir=./file0"
[  282.942134] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004d, 0x12, 0x1d})

02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6088ffffffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xf6ffffff00000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:03 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x2c0, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd56}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16e3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xfffffffffffffeac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9cc00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x473}]}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x988}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000080)={{0x0, 0x2, 0x1, 0x6, 0xf0, 0x3, 0x20, 0xffffffff, 0xff, 0x3, 0x20, 0x7f, 0x28000000000, 0x895, 0x8db}})
preadv(r0, &(0x7f0000000080), 0xa, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
fchdir(r3)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  283.059608] overlayfs: bad mount option "redirect_dir=./file0"
[  283.076623] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  283.086273] overlayfs: bad mount option "redirect_dir=./file0"
02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004e, 0x12, 0x1d})

02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[], 0x32600)
write$cgroup_int(r1, &(0x7f0000000040), 0x43)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  283.241275] overlayfs: bad mount option "redirect_dir=./file0"
[  283.248243] VFS: Found a V7 FS (block size = 512) on device loop1
[  283.260864] overlayfs: bad mount option "redirect_dir=./file0"
02:18:03 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfbffffff00000000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100004f, 0x12, 0x1d})

02:18:03 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/808]}, 0x3a0)
r3 = signalfd4(r0, &(0x7f0000000080)={[0x2]}, 0x8, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x29, @dev, 0x4e20, 0x3, 'nq\x00', 0x15, 0x7ea7, 0x76}, 0x2c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)

[  283.339290] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x32030000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0)
ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f00000000c0)={"3dcfccd0ceb57e646adaeffff7309792d4e274ed122bf3f2ce7630a37c5b", 0x10a, 0x9, 0x8, [0x4dd, 0x7, 0xe7, 0x81, 0x0, 0x1f, 0x993, 0xfffffff8, 0x0, 0xbd, 0x0, 0x9, 0x503, 0xffffffcb, 0x81, 0x7f, 0x5, 0x80000001]})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  283.411934] overlayfs: bad mount option "redirect_dir=./file0"
[  283.431507] overlayfs: bad mount option "redirect_dir=./file0"
02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000050, 0x12, 0x1d})

[  283.519031] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x400300, 0x4b)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xffffffffffff0700, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:03 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  283.623999] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:03 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3f000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000051, 0x12, 0x1d})

02:18:03 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@polexpire={0x150, 0x1b, 0x800, 0x70bd2c, 0x25dfdbfe, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x3, 0x4e20, 0x0, 0x2, 0xa0, 0x0, 0x2f, r2, 0xee00}, {0xfffffffffffffffe, 0x6, 0x7, 0x7fff, 0x4, 0x0, 0xf0, 0x8}, {0x400, 0x8, 0x532, 0x3f}, 0x3f, 0x6e6bc0, 0x1, 0x0, 0x2}}, [@replay_esn_val={0x34, 0x17, {0x6, 0x70bd25, 0x70bd29, 0x70bd29, 0x70bd2b, 0x36a, [0x7, 0x10001, 0x8f8, 0xffffffea, 0x3, 0x800]}}, @migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@remote, @in=@remote, @in=@empty, 0x2b, 0x0, 0x0, 0x3502, 0xa, 0xa}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x150}}, 0x80)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:03 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000052, 0x12, 0x1d})

02:18:03 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
clone(0x10000000, &(0x7f0000000080)="5baf1dbd0cf058232676f320a5ee9c9f211ddf0fcdad899cfe229a3fc6b18ecf42c99efb02d165aaff606e102810e7bb67abcac6f7f234a96f27678f6ab71bc703893ba7b524d47376ac1ca3dfaba688ab71dddfe21f7051148a4d", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="dd8302175fbeb20afd0f6e484b8d7a090c3e417b7fe634d42476a0881be9aaa7461f8e1ae6b928a9")

[  283.800838] VFS: Found a V7 FS (block size = 512) on device loop1
[  283.819603] overlayfs: bad mount option "redirect_dir=./file0"
[  283.821457] overlayfs: bad mount option "redirect_dir=./file0"
02:18:04 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xfffffffffffff000, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:04 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x300000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x54010000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x29280a00, &(0x7f0000000080)="bc805b394f6f2ba51a41ca25ecf722fc625d0b73be952b5a2c06936173813889d4a3554de12f7c6de20b", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="1a3b525d56ab426ad48468be587a91270b6dbd6370eed754fec9e7a98eb174f7b016c84254778d698fffcacee37db460c8fd23b1ca3454ce7935a2c1790743928ce01110eb4515e308be5982fbaa9256db7dc5cafab0d0d2b835093242818d99c570f915bd187395bfde88b53fe6b0e3a66a1d3ce05c597cd653fb82ecde80e1ce655b44a79addc4ece1a20dca0786ebd75450e35981cd6ee4ca52a34b60057134e3d39cd3028db0632d103e022dcd89023ec69ded21af78a550e5f9")
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  283.897119] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:04 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x9222000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x23204900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:04 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000053, 0x12, 0x1d})

[  283.991025] overlayfs: bad mount option "redirect_dir=./file0"
[  284.017620] overlayfs: bad mount option "redirect_dir=./file0"
02:18:04 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x60000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100), 0x0, 0x6}, {&(0x7f0000000140)="cb683d95d25b90292fc7e7a41de71e32ccedfaeb67f35511fce8202933f9046156a4a9033359784c6b5377a870b0d4b4aff685f93a5c", 0x36, 0x100000001}, {&(0x7f0000000180)="0e1f687a785e26a7ccecbde88ca66aecfebef507da0ea8773cfb20bd761566e561c016b18756864f1916e8fb0f98f90e6030f29a4e4ffff0c844e478c1318e41c079879f7b11863f8c2216272de81e604345843f951f83875385a4480dae52e79ee7cc637726ab70100585daf4555de7692243683f5212ff3e6836075a0542c1c6ae3217", 0x84, 0x10000}], 0x1000, &(0x7f00000002c0)={[{@anchor={'anchor', 0x3d, 0xffffffffffffff81}}, {@dmode={'dmode', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x7fff}}, {@bs={'bs', 0x3d, 0x9}}], [{@measure}, {@uid_lt}]})
preadv(r2, &(0x7f0000000540)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000480)=""/174, 0xae}], 0x3, 0x3, 0x2)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  284.116500] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:04 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0xffffffffffffff7f, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:04 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x500000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3, @any, 0x2}, 0xe)

02:18:04 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000054, 0x12, 0x1d})

[  284.214812] overlayfs: bad mount option "redirect_dir=./file0"
[  284.231760] overlayfs: bad mount option "redirect_dir=./file0"
[  284.245359] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:04 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:04 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x39a)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)

[  284.355787] Bluetooth: hci0: command 0x0406 tx timeout
[  284.361639] Bluetooth: hci1: command 0x0406 tx timeout
[  284.384854] Bluetooth: hci2: command 0x0406 tx timeout
02:18:04 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x3000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000800000000000700000000000000000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f73653000000000000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000002abd6d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000f153a7ba0001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000000000000000000766c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000001000000000001000000010000380100006367726f75700000000000000000000000ffffffffffffffe100000000000000080000000000000000000000000000006172beef9ee600000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f341210000000000000000000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff000000000000"]}, 0x3ac)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  284.402129] Bluetooth: hci3: command 0x0406 tx timeout
[  284.415703] VFS: Found a V7 FS (block size = 512) on device loop1
[  284.434620] Bluetooth: hci5: command 0x0406 tx timeout
[  284.515986] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  284.835728] Bluetooth: hci4: command 0x0405 tx timeout
02:18:05 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x600000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000055, 0x12, 0x1d})

02:18:05 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x95020000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
syz_mount_image$jffs2(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="970696bb4a183b3271f7a4f2da86e2c9ac4f0ba240b64598668df944fbd0f5c59920708a97108e0e23d7755a6dd727de0e56a1ef2729522449bdf7e221bb5983f34a9ed7", 0x44, 0x10001}], 0x1000400, &(0x7f00000002c0)={[{@compr_zlib}, {@rp_size={'rp_size', 0x3d, 0xab0}}, {@compr_zlib}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit}, {@fsname={'fsname', 0x3d, '!'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'\\.(+-:-\x99'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role}]})
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
umount2(&(0x7f0000000040)='./bus/file0\x00', 0x1)

02:18:05 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/148, 0x94}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f00000008c0)=""/242, 0xf2}, {&(0x7f0000000500)=""/84, 0x54}], 0x5, 0x4, 0x100003)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:05 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x18001180, &(0x7f0000000080)="7c5e87b52aa0a24800e9f72870f1413dbaf847c791995540d37af733c45b9903183502a80e75d20b23235c6caef180e167bff540b38d97762b55c7d10334298a4d7a2b3e063e0124c7fdee5cd4683360edc7e10479f4f9914211f6847c095e594d858608badf0be96747ccbd21a5399d0bf207354e05af25a4c8be2d603b724d2db15d59e0beee00ebdf2324e2256d3e8bfe250426731d2fdd701b05b9c2c32e46ebe8351efbe39949c4f4970575d1b8439794ea66a4a73a52f14830615a8f43352de297e017f3a2c8c991b39f69059c90ac442d3b634736f8e14633a2241d2a60bcc496d196cbef0357", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a8d4b074a81a743aa1d0816395d09faa238d12dd68d288124b9730538e3c7072726d9c0d68137a49928d4bfe3d494871e9c9ce4f34bf1e6a9a49923575f2764318bd5ad6907bba86e3f6cb1a2fc86e9da5e691ddb3e270877386ac37eefbb78f8547904ee91963af1b13b6f76c495ab541229f38d0e738ca403217fa9bb141b7cdf44bc7221441d124aae437128f66273745a0ba942d28af30a6465c5906ba5ac9d62bdad5f620f8cde47e79")
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x1})
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

[  285.005410] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000056, 0x12, 0x1d})

02:18:05 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb10b0000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x8000, 0x401200)
openat$cgroup_ro(r0, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0)

02:18:05 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  285.132612] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:05 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x1200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000057, 0x12, 0x1d})

02:18:05 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb20b0000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  285.257282] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x200000002, 0x0)
r2 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r2)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x2)
r4 = gettid()
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x34, [0x0, 0x0, 0x0, 0x0, 0x4, 0x11b], 0x2, 0x0, &(0x7f0000003440)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES64=r3, @ANYRES64=r2, @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES64, @ANYRES16, @ANYRES64=r3, @ANYRES32=r1]}, 0xe0)
preadv(r1, &(0x7f00000032c0)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x6, 0x6, 0xffffffc1)
shmget(0x0, 0x4000, 0x4, &(0x7f00006ae000/0x4000)=nil)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write(r5, &(0x7f0000003680)="fb806adcac8d8cd7f8e82c37c3866c990c5158d853659ac651", 0x19)
r6 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
shmat(r6, &(0x7f0000ffa000/0x3000)=nil, 0x7000)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:05 executing program 1:
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x6, 0x7, 0x2, 0x1, 0x5], 0x2, 0x1}, {0x1, [0x8dd174fe17d839d4, 0x1, 0x6, 0x5, 0x5, 0x2], 0x3, 0x2}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xffffff00, 0xffffff00, 'vlan0\x00', 'team_slave_0\x00', {0xff}, {}, 0x22, 0x1, 0x52}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x3ff, 0x3476bec2, 0x1000, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)

02:18:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000058, 0x12, 0x1d})

02:18:05 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  285.357390] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x1000059, 0x12, 0x1d})

02:18:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:05 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xe6000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:05 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3f00000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  285.434983] overlayfs: bad mount option "redirect_dir=./file0"
02:18:06 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)
r3 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x2, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

02:18:06 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6000000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005a, 0x12, 0x1d})

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff00000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf89d0300, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005b, 0x12, 0x1d})

[  286.264949] VFS: could not find a valid V7 on loop1.
02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff1f00, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  286.369072] VFS: could not find a valid V7 on loop1.
02:18:06 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x8)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff00000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff7f, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005c, 0x12, 0x1d})

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff1f0000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x43400)
write$cgroup_int(r0, &(0x7f0000000440), 0x12)
mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0xe0, 0x8c, 0x80, 0xc0, 0x0, 0x5, 0x21dd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x6}, 0x1240, 0x9, 0x3, 0x8, 0xe65f, 0x101, 0x3ff, 0x0, 0x1, 0x0, 0x13}, r1, 0x1, r2, 0x2)
r3 = syz_open_dev$audion(&(0x7f00000001c0), 0x2, 0x20001)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x9, 0x40, 0x3, 0x40, 0x0, 0x2, 0x15081, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x4200, 0x7, 0x81, 0x0, 0x4, 0xffffffff, 0x200, 0x0, 0xfffffff9, 0x0, 0x81}, r0, 0x7, r3, 0x6)
mknodat$null(r1, &(0x7f0000000180)='./bus\x00', 0x4, 0x103)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)

02:18:06 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/241, 0xf1}], 0x4, 0x9, 0x5)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff7f00000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005d, 0x12, 0x1d})

02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  286.614330] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:06 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x19f25000)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x11908800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000100)='./file0\x00', 0x600400, 0x128)
dup3(0xffffffffffffffff, r0, 0x80000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00')
creat(&(0x7f00000000c0)='./file0\x00', 0x161)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8001, @none, 0x0, 0x2}, 0xe)

02:18:06 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffffff00000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:06 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005e, 0x12, 0x1d})

02:18:06 executing program 1:
syz_mount_image$v7(&(0x7f0000000380), &(0x7f00000000c0)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="b82908000000ce8d3d10941313c3a7ae88bbf763f72b62abd0a1cedc8f8c3cff1cefb579887a1b8b17396dbf5d02bcfe7a544c29bbe6fb8461e9b4935ce2547b4100000273eea3e0", 0x48, 0x401}], 0x0, &(0x7f0000000180)=ANY=[])
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x64ca4, 0x0)
stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0xee00)
mount$bpf(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x4010, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x10000}}], [{@euid_eq={'euid', 0x3d, r2}}, {@subj_type={'subj_type', 0x3d, '*{'}}, {@subj_user={'subj_user', 0x3d, ':-'}}, {@uid_gt={'uid>', r0}}]})
r3 = getegid()
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7f4}}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}})

02:18:06 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  286.779926] sysv_free_inode: inode 0,1,2 or nonexistent inode
02:18:07 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffffff88600000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

02:18:07 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
write$cgroup_int(r2, &(0x7f0000000440), 0x12)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe)

02:18:07 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100005f, 0x12, 0x1d})

02:18:07 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  286.915793] Bluetooth: hci4: command 0x0405 tx timeout
[  286.964887] VFS: Found a V7 FS (block size = 512) on device loop1
02:18:07 executing program 3:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000000000000, &(0x7f00000001c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  287.011528] ------------[ cut here ]------------
[  287.038249] WARNING: CPU: 0 PID: 18866 at fs/inode.c:343 inc_nlink.cold+0x11/0x18
[  287.045910] Kernel panic - not syncing: panic_on_warn set ...
[  287.045910] 
[  287.053312] CPU: 0 PID: 18866 Comm: syz-executor.1 Not tainted 4.19.193-syzkaller #0
[  287.061372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  287.070876] Call Trace:
[  287.073570]  dump_stack+0x1fc/0x2ef
[  287.077329]  panic+0x26a/0x50e
[  287.080557]  ? __warn_printk+0xf3/0xf3
[  287.084552]  ? inc_nlink.cold+0x11/0x18
[  287.088540]  ? __probe_kernel_read+0x130/0x1b0
[  287.093158]  ? __warn.cold+0x5/0x5a
[  287.096803]  ? inc_nlink.cold+0x11/0x18
[  287.100948]  __warn.cold+0x20/0x5a
[  287.104604]  ? inc_nlink.cold+0x11/0x18
[  287.108691]  report_bug+0x262/0x2b0
[  287.112379]  do_error_trap+0x1d7/0x310
[  287.116283]  ? math_error+0x310/0x310
[  287.120104]  ? __irq_work_queue_local+0x101/0x160
[  287.125159]  ? irq_work_queue+0x29/0x80
[  287.129146]  ? error_entry+0x72/0xd0
[  287.132905]  ? trace_hardirqs_off_caller+0x6e/0x210
[  287.137942]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  287.142934]  invalid_op+0x14/0x20
[  287.146577] RIP: 0010:inc_nlink.cold+0x11/0x18
[  287.151171] Code: c0 74 04 3c 03 7e 08 8b 5d 48 e9 ff 4f b5 f9 4c 89 e7 e8 d2 82 a4 f9 eb ee e8 cb b9 6e f9 48 c7 c7 40 ad 74 88 e8 98 ee fe ff <0f> 0b e9 41 51 b5 f9 e8 b3 b9 6e f9 48 8d 7b 40 b8 ff ff 37 00 48
[  287.170179] RSP: 0018:ffff8880427ffdf0 EFLAGS: 00010282
[  287.175553] RAX: 0000000000000024 RBX: ffff888046365b08 RCX: 0000000000000000
[  287.182838] RDX: 000000000000ba15 RSI: ffffffff814df6b1 RDI: ffffed10084fffb0
[  287.190472] RBP: 0000000000000000 R08: 0000000000000024 R09: 0000000000000000
[  287.197750] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888046365b50
[  287.205024] R13: ffff88808dd354a0 R14: 000000000000007e R15: 00000000000001ed
[  287.212328]  ? vprintk_func+0x81/0x180
[  287.216353]  sysv_mkdir+0x21/0x150
[  287.219925]  vfs_mkdir+0x508/0x7a0
[  287.223479]  do_mkdirat+0x262/0x2d0
[  287.227125]  ? __ia32_sys_mknod+0x120/0x120
[  287.231816]  ? trace_hardirqs_off_caller+0x6e/0x210
[  287.236848]  ? do_syscall_64+0x21/0x620
[  287.240846]  do_syscall_64+0xf9/0x620
[  287.244928]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  287.250129] RIP: 0033:0x4656e7
[  287.253349] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  287.273130] RSP: 002b:00007fa6b9934fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  287.281035] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004656e7
[  287.288314] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000180
[  287.295592] RBP: 00007fa6b9935040 R08: 0000000000000000 R09: 0000000000000010
[  287.302869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040
[  287.310147] R13: 0000000020000180 R14: 00007fa6b9935000 R15: 00000000200003c0
[  287.318489] Kernel Offset: disabled
[  287.322191] Rebooting in 86400 seconds..