n(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff01, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  539.391389][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  539.509744][ T7082] loop3: detected capacity change from 0 to 4
[  539.519820][ T7084] overlayfs: failed to resolve './file1': -2
[  539.535551][ T7082] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  539.564944][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.583301][ T7089] overlayfs: failed to resolve './file1': -2
[  539.615488][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.628349][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  539.629101][ T7094] loop3: detected capacity change from 0 to 4
[  539.699377][ T7094] loop3: detected capacity change from 0 to 4
[  539.734185][ T7008] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  539.746398][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.762180][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.770988][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  539.857627][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.871894][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.882615][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:01 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101102400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  539.918693][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  539.930105][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.938744][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:01 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x60000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:01 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff03, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:01 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x6}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  540.067828][ T7125] loop3: detected capacity change from 0 to 4
[  540.075190][ T7127] loop2: detected capacity change from 0 to 4
[  540.087929][ T7130] overlayfs: failed to resolve './file1': -2
[  540.104074][ T7125] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:01 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x68000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  540.135366][ T7138] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  540.137173][ T7139] overlayfs: failed to resolve './file1': -2
[  540.165286][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  540.197919][ T7147] overlayfs: failed to resolve './file1': -2
[  540.227305][ T7125] loop3: detected capacity change from 0 to 4
[  540.236962][ T7148] overlayfs: failed to resolve './file1': -2
06:33:01 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  540.244769][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.253139][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:01 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff0f, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:01 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb301, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf00}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  540.333842][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  540.409677][ T7166] loop3: detected capacity change from 0 to 4
[  540.418201][ T7166] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  540.426665][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.444369][ T7165] overlayfs: failed to resolve './file1': -2
[  540.450449][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.468716][ T7173] overlayfs: failed to resolve './file1': -2
[  540.486261][ T7166] loop3: detected capacity change from 0 to 4
[  540.492959][ T7172] loop2: detected capacity change from 0 to 4
06:33:01 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x74000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  540.519205][ T7172] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  540.614365][ T7188] overlayfs: failed to resolve './file1': -2
[  540.627544][ T7185] loop2: detected capacity change from 0 to 4
[  540.657820][ T7193] overlayfs: failed to resolve './file1': -2
[  540.709241][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  540.723832][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.732753][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.799530][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  540.830002][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.841926][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.897602][ T7138] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:02 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101202400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:02 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffa1, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4c00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7a000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x7}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  541.096705][ T7224] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  541.105164][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.105220][ T7220] loop3: detected capacity change from 0 to 4
[  541.123501][ T7221] overlayfs: failed to resolve './file1': -2
[  541.130857][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.133386][ T7225] loop2: detected capacity change from 0 to 4
06:33:02 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8cffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  541.147005][ T7225] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  541.155710][ T7220] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  541.179399][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.187457][ T7237] overlayfs: failed to resolve './file1': -2
[  541.215469][ T7225] loop2: detected capacity change from 0 to 4
[  541.221777][ T7220] loop3: detected capacity change from 0 to 4
06:33:02 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x90000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb3010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  541.328789][ T7220] loop3: detected capacity change from 0 to 4
06:33:02 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb8020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:02 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  541.501177][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.555572][ T7266] loop3: detected capacity change from 0 to 4
[  541.564195][ T7266] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  541.572696][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.587450][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.636047][ T7276] loop2: detected capacity change from 0 to 4
[  541.653745][ T7266] loop3: detected capacity change from 0 to 4
[  541.671440][ T7224] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  541.698592][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.782115][ T7276] overlayfs: conflicting lowerdir path
[  541.785695][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.799669][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.817342][ T7266] loop3: detected capacity change from 0 to 4
[  541.865927][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.877753][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.886068][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  541.918962][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  541.945686][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  541.953481][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101302400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc0ed0000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4788}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:03 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:03 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:03 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x8}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  542.118782][ T7317] loop2: detected capacity change from 0 to 4
[  542.125666][ T7317] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  542.146051][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  542.154791][ T7324] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  542.164376][ T7322] overlayfs: failed to resolve './file1': -2
[  542.166330][ T7321] loop3: detected capacity change from 0 to 4
[  542.170659][ T7317] loop2: detected capacity change from 0 to 4
[  542.186616][ T7321] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  542.204631][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc2020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.216401][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  542.222153][ T7336] overlayfs: failed to resolve './file1': -2
[  542.278906][ T7321] loop3: detected capacity change from 0 to 4
06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc3020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.384145][ T7341] loop3: detected capacity change from 0 to 4
06:33:03 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc4020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:03 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7ff00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.496044][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  542.529828][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd8ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.545805][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  542.585140][ T7366] loop2: detected capacity change from 0 to 4
[  542.615142][ T7368] loop3: detected capacity change from 0 to 4
[  542.646270][ T7368] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:03 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101402400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4888}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:03 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf6ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.719852][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  542.757489][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:03 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd8ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.799191][ T7387] loop3: detected capacity change from 0 to 4
06:33:03 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x100000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  542.850439][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  542.882327][ T7398] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  542.905863][ T7401] loop2: detected capacity change from 0 to 4
[  542.931134][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  542.963126][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.000762][ T7328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.014410][ T7414] loop3: detected capacity change from 0 to 4
[  543.030028][ T7414] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x9}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:04 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:04 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf9fdffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  543.071554][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.085100][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.093851][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.095482][ T7414] loop3: detected capacity change from 0 to 4
[  543.121713][ T7392] __nla_validate_parse: 19 callbacks suppressed
[  543.121733][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  543.140485][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:04 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfeffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  543.218508][ T7426] loop2: detected capacity change from 0 to 4
[  543.239535][ T7414] loop3: detected capacity change from 0 to 4
06:33:04 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1fffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5865}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:04 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  543.307602][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  543.349453][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.398719][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.414577][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.446463][ T7453] loop3: detected capacity change from 0 to 4
[  543.455005][ T7453] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  543.514129][ T7453] loop3: detected capacity change from 0 to 4
[  543.521035][ T7398] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  543.530406][ T7398] netlink: 207804 bytes leftover after parsing attributes in process `syz-executor.4'.
[  543.547199][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.558856][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.569458][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.596126][ T7476] loop3: detected capacity change from 0 to 4
[  543.658609][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  543.705270][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  543.727324][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.753357][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.770982][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  543.854208][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  543.865765][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  543.876616][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:05 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101502400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x8}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:05 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0xa}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6000}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  543.984755][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff030000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  544.111767][ T7499] loop3: detected capacity change from 0 to 4
[  544.126373][ T7499] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  544.142259][ T7507] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  544.167223][ T7507] netlink: 207548 bytes leftover after parsing attributes in process `syz-executor.4'.
[  544.184252][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  544.201846][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffff1f00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  544.211365][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.225155][ T7516] loop3: detected capacity change from 0 to 4
[  544.279619][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffdf9, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff7f, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  544.354627][ T7516] loop3: detected capacity change from 0 to 4
[  544.389865][ T7530] overlayfs: filesystem on './file0' not supported as upperdir
06:33:05 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200011, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  544.431562][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:05 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff8c, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  544.481668][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  544.531629][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.556554][ T7546] loop3: detected capacity change from 0 to 4
[  544.563595][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.565278][ T7546] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  544.605906][ T7546] loop3: detected capacity change from 0 to 4
[  544.656207][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  544.658687][ T7507] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  544.688405][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.705428][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.741928][ T7546] overlayfs: conflicting lowerdir path
[  544.764652][ T7566] loop3: detected capacity change from 0 to 4
[  544.776568][ T7569] overlayfs: workdir and upperdir must reside under the same mount
[  544.816139][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  544.839198][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.848835][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101602400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:06 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffffd8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6558}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:06 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0xc}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffff6, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.053830][ T7593] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  545.075709][ T7589] loop3: detected capacity change from 0 to 4
[  545.081857][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.089333][ T7592] loop2: detected capacity change from 0 to 4
[  545.095764][ T7589] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  545.105666][ T7592] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  545.149232][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.179229][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:06 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200011, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffffe, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.247858][ T7592] overlayfs: conflicting lowerdir path
[  545.340235][ T7589] loop3: detected capacity change from 0 to 4
[  545.390652][ T7616] overlayfs: filesystem on './file0' not supported as upperdir
06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.442871][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.463237][ T7624] loop2: detected capacity change from 0 to 4
[  545.481855][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.483371][ T7624] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  545.524531][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x777fc68b48ff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:06 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101702400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8100}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:06 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.649255][ T7624] overlayfs: conflicting lowerdir path
[  545.686090][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.692360][ T7639] loop3: detected capacity change from 0 to 4
[  545.723224][ T7639] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  545.730804][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.761895][ T7652] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  545.774889][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:06 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xedc000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.816731][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.839486][ T7660] loop2: detected capacity change from 0 to 4
[  545.860702][ T7660] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  545.877296][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.884813][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  545.925684][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.954164][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.964040][ T7590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  545.971571][ T7670] loop2: detected capacity change from 0 to 4
[  545.985347][ T7658] loop3: detected capacity change from 0 to 4
[  546.015061][ T7677] overlayfs: filesystem on './file0' not supported as upperdir
06:33:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0xf}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:07 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800002, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:07 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1fffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  546.261256][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  546.269026][ T7697] loop3: detected capacity change from 0 to 4
[  546.284913][ T7697] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  546.304108][ T7701] loop2: detected capacity change from 0 to 4
06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x100000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  546.312251][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.323478][ T7701] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  546.332365][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.353009][ T7697] loop3: detected capacity change from 0 to 4
06:33:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8847}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:07 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101802400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  546.411053][ T7701] loop2: detected capacity change from 0 to 4
[  546.421909][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:07 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  546.520272][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.533925][ T7730] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  546.557284][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:07 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff0700, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:07 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x300000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  546.587823][ T7697] loop3: detected capacity change from 0 to 4
[  546.608524][ T7734] overlayfs: filesystem on './file0' not supported as upperdir
[  546.729486][ T7750] loop3: detected capacity change from 0 to 4
[  546.737958][ T7750] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  546.786676][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  546.806539][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.814440][ T7750] loop3: detected capacity change from 0 to 4
[  546.814566][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.857251][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  546.871351][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.880630][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.904822][ T7750] loop3: detected capacity change from 0 to 4
[  546.957235][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.015024][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  547.046760][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x10}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:08 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:08 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8848}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:08 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  547.096622][ T7745] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  547.125104][ T7730] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:08 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x500000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  547.207098][ T7782] loop3: detected capacity change from 0 to 4
[  547.216715][ T7782] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  547.291419][ T7782] loop3: detected capacity change from 0 to 4
06:33:08 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x600000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  547.355999][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.427530][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  547.436429][ T7797] loop3: detected capacity change from 0 to 4
[  547.453065][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  547.461202][ T7814] overlayfs: filesystem on './file0' not supported as upperdir
06:33:08 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101902400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:08 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x700000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:08 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:08 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  547.569137][ T7795] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  547.589425][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.631342][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  547.656227][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  547.669648][ T7833] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:08 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  547.691006][ T7831] loop3: detected capacity change from 0 to 4
[  547.699763][ T7831] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  547.776552][ T7831] loop3: detected capacity change from 0 to 4
[  547.917153][ T7853] loop3: detected capacity change from 0 to 4
[  547.943587][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.964075][ T7853] overlayfs: filesystem on './file0' not supported as upperdir
[  547.984002][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  547.991863][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  548.056349][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.074536][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.082420][ T7808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x60}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:09 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x900000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:09 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2008000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  548.127296][ T7810] __nla_validate_parse: 20 callbacks suppressed
[  548.127370][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  548.158734][ T7839] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
06:33:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  548.180787][ T7839] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'.
[  548.216354][ T7833] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:09 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:09 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  548.233848][ T7833] netlink: 206524 bytes leftover after parsing attributes in process `syz-executor.4'.
[  548.255958][ T7868] loop3: detected capacity change from 0 to 4
[  548.264938][ T7868] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:09 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  548.278411][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.316954][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.324659][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  548.356440][ T7868] loop3: detected capacity change from 0 to 4
[  548.380506][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  548.418234][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  548.449187][ T7868] overlayfs: conflicting lowerdir path
[  548.501648][ T7895] loop3: detected capacity change from 0 to 4
[  548.505289][ T7901] overlayfs: workdir and upperdir must reside under the same mount
[  548.620957][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.654920][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.663133][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:09 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101a02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:09 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:09 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:09 executing program 2:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  548.708207][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  548.717463][ T7880] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  548.733336][ T7880] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'.
[  548.773497][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.810280][ T7918] netlink: 206268 bytes leftover after parsing attributes in process `syz-executor.4'.
[  548.826986][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  548.838866][ T7916] loop3: detected capacity change from 0 to 4
[  548.846107][ T7916] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  548.854674][ T7870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  548.921490][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.929784][ T7916] loop3: detected capacity change from 0 to 4
[  548.980709][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.003633][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:10 executing program 2:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

[  549.081961][ T7937] loop3: detected capacity change from 0 to 4
[  549.098690][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:10 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  549.127798][ T7938] overlayfs: filesystem on './file0' not supported as upperdir
06:33:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xe00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:10 executing program 2:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  549.299650][ T7954] loop3: detected capacity change from 0 to 4
[  549.310324][ T7954] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  549.313620][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  549.338002][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.349875][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.357679][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  549.388717][ T7954] loop3: detected capacity change from 0 to 4
[  549.516447][ T7954] overlayfs: conflicting lowerdir path
[  549.557226][ T7954] loop3: detected capacity change from 0 to 4
[  549.566234][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.591330][ T7983] overlayfs: workdir and upperdir must reside under the same mount
[  549.604246][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.611914][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101b02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:10 executing program 2:
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:10 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:10 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  549.690205][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.738166][ T8004] loop3: detected capacity change from 0 to 4
[  549.738901][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.754010][ T8004] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  549.765951][ T7951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  549.814320][ T8004] loop3: detected capacity change from 0 to 4
[  549.859568][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  549.871202][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  549.878854][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:11 executing program 2:
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:11 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1100000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:11 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  549.925263][ T8004] overlayfs: conflicting lowerdir path
[  549.940176][ T8026] loop3: detected capacity change from 0 to 4
[  549.953138][ T8028] overlayfs: workdir and upperdir must reside under the same mount
06:33:11 executing program 2:
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:11 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1100200000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  550.073802][ T8042] loop3: detected capacity change from 0 to 4
[  550.105230][ T8042] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:11 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1200000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  550.137125][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  550.169596][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.177699][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  550.294426][ T8058] loop3: detected capacity change from 0 to 4
[  550.327540][ T8013] nla_validate_range_unsigned: 3 callbacks suppressed
[  550.327554][ T8013] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  550.339816][ T8060] overlayfs: filesystem on './file0' not supported as upperdir
[  550.356140][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  550.385939][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.393858][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  550.555577][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  550.566784][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.574480][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:11 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101c02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:11 executing program 2:
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:11 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:11 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1284000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  550.617287][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  550.631322][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.640105][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:11 executing program 2:
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

06:33:11 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  550.777281][ T8097] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  550.805212][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:11 executing program 2:
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

[  550.830102][ T8095] loop3: detected capacity change from 0 to 4
[  550.848643][ T8095] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  550.871755][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  550.894685][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2010000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)

[  550.941024][ T8095] overlayfs: conflicting lowerdir path
[  550.997101][ T8125] overlayfs: workdir and upperdir must reside under the same mount
[  551.005104][ T8095] loop3: detected capacity change from 0 to 4
[  551.135037][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  551.148423][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.156454][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101d02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:12 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)

06:33:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2500000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)

[  551.235716][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  551.271649][ T8149] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  551.291132][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.310430][ T8153] loop3: detected capacity change from 0 to 4
[  551.316743][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  551.317428][ T8153] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  551.378986][ T8153] loop3: detected capacity change from 0 to 4
[  551.413694][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:12 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

06:33:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3a00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  551.425744][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.433542][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  551.531327][ T8164] loop3: detected capacity change from 0 to 4
06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

06:33:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3b01000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  551.575750][ T8168] overlayfs: filesystem on './file0' not supported as upperdir
06:33:12 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8040000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  551.657191][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  551.677429][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.687849][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  551.754941][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  551.762413][ T8193] loop3: detected capacity change from 0 to 4
[  551.769908][ T8193] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  551.784879][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.793173][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:12 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101e02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:12 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

06:33:12 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3c01000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  551.826685][ T8193] loop3: detected capacity change from 0 to 4
[  551.882479][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  551.923969][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  551.935389][ T8193] loop3: detected capacity change from 0 to 4
[  551.941007][ T8214] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

[  551.974241][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  552.083971][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  552.098298][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  552.106303][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x5}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:13 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3d01000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8080000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

[  552.268432][ T8242] loop3: detected capacity change from 0 to 4
[  552.290138][ T8242] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:13 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

[  552.338309][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  552.359219][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  552.368900][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  552.441696][ T8242] loop3: detected capacity change from 0 to 4
[  552.471161][ T8214] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  552.483451][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  552.547904][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  552.555863][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  552.661264][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  552.685015][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  552.693233][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:13 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102102400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

06:33:13 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:13 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  552.739566][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  552.755472][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  552.764870][ T8277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:13 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

06:33:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4601000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  552.905801][ T8294] loop3: detected capacity change from 0 to 4
[  552.910015][ T8297] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  552.922926][ T8294] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

[  552.956647][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  553.002106][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.018240][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  553.045276][ T8313] loop3: detected capacity change from 0 to 4
06:33:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

[  553.191645][ T8313] loop3: detected capacity change from 0 to 4
[  553.211098][ T8334] overlayfs: filesystem on './file0' not supported as upperdir
[  553.306665][ T8311] __nla_validate_parse: 27 callbacks suppressed
[  553.306681][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  553.333510][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  553.346803][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.354553][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:14 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102202400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

06:33:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:14 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  553.390462][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  553.430821][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  553.466956][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.481650][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  553.494587][ T8351] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  553.502992][ T8350] loop3: detected capacity change from 0 to 4
[  553.511348][ T8350] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  553.530846][ T8351] netlink: 204220 bytes leftover after parsing attributes in process `syz-executor.4'.
[  553.615890][ T8350] overlayfs: conflicting lowerdir path
[  553.629363][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  553.643424][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.653225][ T8372] loop3: detected capacity change from 0 to 4
[  553.674317][ T8310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  553.684114][ T8376] overlayfs: workdir and upperdir must reside under the same mount
06:33:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x7}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0)

[  553.744537][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  553.754904][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.762311][ T8318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:14 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:14 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa1e2144, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0)

[  553.802073][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002", 0x17}], 0x1}, 0x0)

[  553.930423][ T8392] loop3: detected capacity change from 0 to 4
[  553.946497][ T8392] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  554.029751][ T8392] loop3: detected capacity change from 0 to 4
[  554.056578][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.066952][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.074876][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.138622][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  554.154924][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.166315][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.173962][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.207525][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  554.238213][ T8351] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  554.248906][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.256876][ T8351] netlink: 204220 bytes leftover after parsing attributes in process `syz-executor.4'.
[  554.274196][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.292863][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.346401][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.360625][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.368759][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.412304][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.427178][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.436954][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:15 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102302400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:15 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e", 0x23}], 0x1}, 0x0)

06:33:15 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e", 0x23}], 0x1}, 0x0)

[  554.633112][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  554.663479][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  554.666407][ T8442] loop3: detected capacity change from 0 to 4
06:33:15 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e", 0x23}], 0x1}, 0x0)

[  554.673278][ T8443] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  554.688591][ T8442] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  554.720259][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.725083][ T8443] netlink: 203964 bytes leftover after parsing attributes in process `syz-executor.4'.
[  554.739956][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:15 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7400000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:15 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000", 0x29}], 0x1}, 0x0)

[  554.786174][ T8472] loop3: detected capacity change from 0 to 4
[  554.848160][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000", 0x29}], 0x1}, 0x0)

[  554.969291][ T8472] loop3: detected capacity change from 0 to 4
[  554.985814][ T8488] overlayfs: filesystem on './file0' not supported as upperdir
[  555.023020][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.047330][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.076683][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.137527][ T8443] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  555.152582][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.176894][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.184608][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.229383][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.242161][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.251945][ T8441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.291989][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.308829][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.317402][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:16 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102402400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:16 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7a00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000", 0x29}], 0x1}, 0x0)

06:33:16 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:16 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700", 0x2c}], 0x1}, 0x0)

06:33:16 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  555.517340][ T8525] loop3: detected capacity change from 0 to 4
[  555.522781][ T8526] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  555.548941][ T8525] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700", 0x2c}], 0x1}, 0x0)

[  555.578760][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.609359][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:16 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8cffffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  555.640294][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.651535][ T8525] overlayfs: conflicting lowerdir path
[  555.672390][ T8525] loop3: detected capacity change from 0 to 4
06:33:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700", 0x2c}], 0x1}, 0x0)

06:33:16 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  555.718987][ T8544] overlayfs: workdir and upperdir must reside under the same mount
[  555.799027][ T8556] loop3: detected capacity change from 0 to 4
[  555.806086][ T8556] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  555.866382][ T8556] overlayfs: conflicting lowerdir path
[  555.904803][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  555.918220][ T8563] loop3: detected capacity change from 0 to 4
[  555.937247][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  555.945072][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.946597][ T8568] overlayfs: workdir and upperdir must reside under the same mount
[  556.028024][ T8526] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  556.043438][ T8534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  556.068886][ T8534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.077553][ T8534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  556.131882][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  556.147266][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.157358][ T8523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  556.197957][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  556.209535][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.218612][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:17 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102502400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:17 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1", 0x2d}], 0x1}, 0x0)

06:33:17 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:17 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xe000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0xa}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:17 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1", 0x2d}], 0x1}, 0x0)

06:33:17 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb301000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  556.428321][ T8603] loop3: detected capacity change from 0 to 4
[  556.439426][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  556.441800][ T8608] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  556.459115][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.467482][ T8603] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:17 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1", 0x2d}], 0x1}, 0x0)

[  556.497001][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:17 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb802000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  556.541728][ T8603] overlayfs: conflicting lowerdir path
06:33:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  556.588692][ T8603] loop3: detected capacity change from 0 to 4
06:33:17 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  556.638477][ T8624] overlayfs: workdir and upperdir must reside under the same mount
[  556.766003][ T8608] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  556.774908][ T8642] loop3: detected capacity change from 0 to 4
[  556.783349][ T8642] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  556.796287][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  556.814506][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.822073][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  556.843669][ T8642] loop3: detected capacity change from 0 to 4
[  556.929750][ T8642] overlayfs: conflicting lowerdir path
[  556.973335][ T8642] loop3: detected capacity change from 0 to 4
[  556.999018][ T8662] overlayfs: workdir and upperdir must reside under the same mount
[  557.039062][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  557.052433][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.060413][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.134937][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  557.149645][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.159205][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:18 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102602400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:18 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc202000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:18 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:18 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0xc}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  557.201992][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  557.215693][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.223923][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:18 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc302000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  557.330193][ T8688] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  557.340532][ T8684] loop2: detected capacity change from 0 to 4
[  557.346897][ T8685] loop3: detected capacity change from 0 to 4
[  557.355603][ T8684] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  557.365249][ T8685] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  557.380206][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:18 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc402000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  557.436129][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.448736][ T8684] loop2: detected capacity change from 0 to 4
[  557.455072][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.455180][ T8685] loop3: detected capacity change from 0 to 4
06:33:18 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102202400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:18 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd8ffffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  557.745306][ T8685] loop3: detected capacity change from 0 to 4
[  557.760288][ T8725] overlayfs: filesystem on './file0' not supported as upperdir
06:33:18 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10a00000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  557.816264][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  557.851140][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.878773][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.916395][ T8739] loop3: detected capacity change from 0 to 4
[  557.923432][ T8739] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  557.955978][ T8735] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  557.983419][ T8739] loop3: detected capacity change from 0 to 4
[  557.990789][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  558.003655][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  558.011275][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  558.055710][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  558.068665][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  558.069148][ T8739] overlayfs: conflicting lowerdir path
[  558.081682][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  558.099996][ T8754] loop3: detected capacity change from 0 to 4
[  558.113205][ T8757] overlayfs: workdir and upperdir must reside under the same mount
[  558.226054][ T8688] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:19 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102702400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:19 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf6ffffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x11}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:19 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x11000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:19 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10a00000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:19 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf9fdffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  558.365909][ T8789] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  558.367973][ T8787] loop3: detected capacity change from 0 to 4
[  558.381007][ T8787] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  558.391316][ T8789] __nla_validate_parse: 21 callbacks suppressed
[  558.391330][ T8789] netlink: 202940 bytes leftover after parsing attributes in process `syz-executor.4'.
[  558.397292][ T8790] loop2: detected capacity change from 0 to 4
[  558.420379][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  558.451323][ T8787] loop3: detected capacity change from 0 to 4
[  558.457530][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  558.471040][ T8790] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  558.481867][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:19 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfeffffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  558.516163][ T8813] loop2: detected capacity change from 0 to 4
[  558.539452][ T8795] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:19 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x10000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  558.630449][ T8819] loop3: detected capacity change from 0 to 4
[  558.647384][ T8825] overlayfs: filesystem on './file0' not supported as upperdir
06:33:19 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x11002000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:19 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  558.739171][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  558.774228][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:19 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff01000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  558.786416][ T8836] loop2: detected capacity change from 0 to 4
[  558.801988][ T8836] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  558.815433][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  558.825240][ T8843] loop3: detected capacity change from 0 to 4
[  558.831499][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  558.837338][ T8843] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  558.876824][ T8836] loop2: detected capacity change from 0 to 4
[  558.894632][ T8843] loop3: detected capacity change from 0 to 4
[  558.914900][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:20 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102802400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:20 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff03000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x60}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  558.983672][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:20 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x11000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  559.030581][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  559.038670][ T8843] loop3: detected capacity change from 0 to 4
[  559.050842][ T8875] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  559.061323][ T8875] netlink: 202684 bytes leftover after parsing attributes in process `syz-executor.4'.
[  559.071357][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  559.129980][ T8887] loop2: detected capacity change from 0 to 4
[  559.147510][ T8887] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  559.191045][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  559.204408][ T8887] loop2: detected capacity change from 0 to 4
[  559.211472][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  559.219595][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  559.277249][ T8887] overlayfs: conflicting lowerdir path
06:33:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x10}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:20 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x12000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:20 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff488bc67f770000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:20 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x11000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  559.319125][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:20 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffff1f0000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  559.418383][ T8903] loop3: detected capacity change from 0 to 4
[  559.439768][ T8903] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  559.461592][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  559.476443][ T8908] loop2: detected capacity change from 0 to 4
[  559.491954][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  559.501821][ T8908] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
06:33:20 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff7f00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  559.513131][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  559.521064][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  559.531649][ T8914] loop3: detected capacity change from 0 to 4
[  559.586112][ T8908] loop2: detected capacity change from 0 to 4
[  559.693787][ T8875] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:20 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffffff00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:20 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x6}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  559.748420][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  559.774503][ T8875] netlink: 202684 bytes leftover after parsing attributes in process `syz-executor.4'.
[  559.784337][ T8914] loop3: detected capacity change from 0 to 4
[  559.804305][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  559.813016][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  559.825265][ T8944] overlayfs: filesystem on './file0' not supported as upperdir
[  559.919345][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  560.074955][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  560.114503][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.123352][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  560.198705][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  560.229133][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.237088][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  560.295223][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  560.308428][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.317198][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:21 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60102c02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:21 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x13000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:21 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x8, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x60}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:21 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x12000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  560.494299][ T8971] loop3: detected capacity change from 0 to 4
[  560.499192][ T8976] netlink: 201660 bytes leftover after parsing attributes in process `syz-executor.4'.
[  560.502882][ T8971] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  560.514630][ T8974] overlayfs: unrecognized mount option "upperdir./file0" or missing value
[  560.521752][ T8973] loop2: detected capacity change from 0 to 4
[  560.534672][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  560.543040][ T8973] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  560.560177][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.563947][ T8984] overlayfs: unrecognized mount option "upperdir./file0" or missing value
[  560.576871][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:21 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x2c, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  560.630288][ T8971] loop3: detected capacity change from 0 to 4
06:33:21 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  560.801001][ T9003] loop2: detected capacity change from 0 to 4
[  560.811408][ T9001] overlayfs: unrecognized mount option "upperdir" or missing value
[  560.849499][ T9010] overlayfs: unrecognized mount option "upperdir" or missing value
[  560.858948][ T8971] loop3: detected capacity change from 0 to 4
06:33:22 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101e02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:22 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x5c, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  560.916526][ T8999] overlayfs: filesystem on './file0' not supported as upperdir
[  560.939281][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  561.015278][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.037975][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.062613][ T9022] loop3: detected capacity change from 0 to 4
[  561.069554][ T9022] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  561.093900][ T9023] overlayfs: unrecognized mount option "upperdir\./file0" or missing value
06:33:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x500}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60104802400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}, 0x5c}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  561.127617][ T9020] nla_validate_range_unsigned: 1 callbacks suppressed
[  561.127632][ T9020] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  561.139553][ T9022] loop3: detected capacity change from 0 to 4
[  561.154429][ T9027] overlayfs: unrecognized mount option "upperdir\./file0" or missing value
[  561.168438][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  561.203714][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.211306][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x8, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  561.275118][ T9049] overlayfs: missing 'lowerdir'
[  561.287547][ T9050] overlayfs: missing 'lowerdir'
[  561.303352][ T9022] overlayfs: conflicting lowerdir path
[  561.317644][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:22 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20100000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  561.324622][ T9044] loop3: detected capacity change from 0 to 4
[  561.338913][ T9054] overlayfs: workdir and upperdir must reside under the same mount
[  561.359621][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.367503][ T8972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.396993][ T9060] overlayfs: unrecognized mount option "lowerdir./file0" or missing value
[  561.433919][ T9063] overlayfs: unrecognized mount option "lowerdir./file0" or missing value
06:33:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x2c, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  561.458780][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  561.469567][ T9065] loop3: detected capacity change from 0 to 4
[  561.476119][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.476241][ T8990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.526720][ T9065] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:22 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x5c, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:22 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x25000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  561.598602][ T9074] overlayfs: unrecognized mount option "lowerdir" or missing value
[  561.627682][ T9065] loop3: detected capacity change from 0 to 4
[  561.631411][ T9080] overlayfs: unrecognized mount option "lowerdir" or missing value
[  561.742800][ T9092] loop3: detected capacity change from 0 to 4
[  561.746598][ T9089] overlayfs: unrecognized mount option "lowerdir\./file0" or missing value
[  561.753704][ T9092] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  561.769945][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  561.783062][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.790655][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.796383][ T9097] overlayfs: unrecognized mount option "lowerdir\./file0" or missing value
[  561.816215][ T9092] loop3: detected capacity change from 0 to 4
[  561.851467][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  561.859588][ T3245] ieee802154 phy0 wpan0: encryption failed: -22
[  561.865882][ T3245] ieee802154 phy1 wpan1: encryption failed: -22
[  561.904479][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  561.915668][ T9092] overlayfs: conflicting lowerdir path
[  561.921314][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  561.946809][ T9092] loop3: detected capacity change from 0 to 4
[  561.965426][ T9105] overlayfs: workdir and upperdir must reside under the same mount
[  561.988351][ T9047] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:23 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60101e02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:23 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x600}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:23 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x30000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  562.020063][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.031695][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.040775][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.092932][ T9121] overlayfs: missing 'workdir'
[  562.133194][ T9128] loop3: detected capacity change from 0 to 4
[  562.133803][ T9129] overlayfs: missing 'workdir'
[  562.141328][ T9128] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  562.172865][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.186117][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.204693][ T9128] loop3: detected capacity change from 0 to 4
[  562.210973][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.296174][ T9128] overlayfs: conflicting lowerdir path
[  562.311344][ T9128] loop3: detected capacity change from 0 to 4
[  562.333458][ T9142] overlayfs: workdir and upperdir must reside under the same mount
[  562.382754][ T9052] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:23 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60104c02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:23 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x8, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x700}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:23 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x342541c2, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  562.471266][ T9125] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  562.526268][ T9175] overlayfs: unrecognized mount option "workdir./file1\" or missing value
[  562.540889][ T9178] loop3: detected capacity change from 0 to 4
[  562.555803][ T9180] overlayfs: unrecognized mount option "workdir./file1\" or missing value
06:33:23 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x2c, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  562.570690][ T9178] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  562.642184][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.653989][ T9188] loop3: detected capacity change from 0 to 4
[  562.675509][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.680009][ T9196] overlayfs: unrecognized mount option "workdir" or missing value
[  562.691193][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.736358][ T9188] loop3: detected capacity change from 0 to 4
[  562.737895][ T9200] overlayfs: unrecognized mount option "workdir" or missing value
06:33:23 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x5c, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:23 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3a000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:23 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x25000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  562.792165][ T9176] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  562.820971][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  562.858254][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.877207][ T9217] overlayfs: unrecognized mount option "workdir\./file1\" or missing value
[  562.887142][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.898887][ T9221] loop3: detected capacity change from 0 to 4
06:33:24 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  562.901214][ T9220] loop2: detected capacity change from 0 to 4
[  562.905844][ T9221] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  562.917088][ T9220] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  562.923742][ T9222] overlayfs: unrecognized mount option "workdir\./file1\" or missing value
[  562.950449][ T9221] loop3: detected capacity change from 0 to 4
[  562.980460][ T9220] loop2: detected capacity change from 0 to 4
[  563.009189][ T9236] overlayfs: failed to resolve './file1': -2
[  563.029312][ T9221] overlayfs: conflicting lowerdir path
[  563.054294][ T9239] overlayfs: failed to resolve './file1': -2
[  563.060593][ T9221] loop3: detected capacity change from 0 to 4
06:33:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x900}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:24 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  563.108237][ T9242] overlayfs: workdir and upperdir must reside under the same mount
[  563.192654][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.230085][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  563.247033][ T9255] overlayfs: failed to resolve './file1': -2
[  563.265967][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  563.279942][ T9258] overlayfs: failed to resolve './file1': -2
[  563.358594][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.371222][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  563.407449][ T9189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  563.506086][ T9252] __nla_validate_parse: 17 callbacks suppressed
[  563.506102][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  563.546254][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  563.556148][ T9185] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  563.575594][ T9185] netlink: 193468 bytes leftover after parsing attributes in process `syz-executor.4'.
[  563.585776][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:24 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60106002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:24 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3c860000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:24 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x2})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xa00}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:24 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3a000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  563.776245][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  563.792877][ T9294] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  563.796996][ T9290] loop2: detected capacity change from 0 to 4
[  563.801384][ T9292] loop3: detected capacity change from 0 to 4
[  563.819824][ T9291] overlayfs: failed to resolve './file1': -2
[  563.836770][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  563.847288][ T9294] netlink: 188348 bytes leftover after parsing attributes in process `syz-executor.4'.
[  563.870513][ T9292] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  563.883120][ T9300] overlayfs: failed to resolve './file1': -2
[  563.891050][ T9290] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  563.911740][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:25 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:25 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:25 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60104c02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  564.077111][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  564.077885][ T9320] overlayfs: failed to resolve './file1': -2
06:33:25 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  564.121140][ T9321] loop3: detected capacity change from 0 to 4
[  564.128178][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  564.131230][ T9322] overlayfs: failed to resolve './file1': -2
[  564.142299][ T9321] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  564.159893][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  564.184151][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  564.238970][ T9330] overlayfs: failed to resolve './file1': -2
[  564.243519][ T9321] loop3: detected capacity change from 0 to 4
[  564.272483][ T9336] overlayfs: failed to resolve './file1': -2
06:33:25 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  564.344339][ T9321] overlayfs: conflicting lowerdir path
[  564.370940][ T9332] loop3: detected capacity change from 0 to 4
[  564.386803][ T9341] overlayfs: workdir and upperdir must reside under the same mount
[  564.397259][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  564.419198][ T9345] overlayfs: failed to resolve './file1': -2
06:33:25 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:25 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  564.444409][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  564.455884][ T9346] overlayfs: failed to resolve './file1': -2
[  564.471412][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  564.491352][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  564.534235][ T9350] overlayfs: failed to resolve './file1': -2
[  564.553549][ T9353] loop3: detected capacity change from 0 to 4
[  564.561321][ T9353] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  564.572483][ T9351] overlayfs: failed to resolve './file1': -2
[  564.603865][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  564.635351][ T9353] overlayfs: conflicting lowerdir path
[  564.642583][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  564.650960][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  564.658941][ T9360] overlayfs: workdir and upperdir must reside under the same mount
[  564.669113][ T9353] loop3: detected capacity change from 0 to 4
[  564.725724][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  564.751422][ T9327] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  564.767345][ T9327] netlink: 193468 bytes leftover after parsing attributes in process `syz-executor.2'.
[  564.897110][ T9299] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  564.923075][ T9299] netlink: 188348 bytes leftover after parsing attributes in process `syz-executor.4'.
06:33:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60106802400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:26 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:26 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x44211e0a, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xb00}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:26 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.102351][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.111379][ T9399] loop3: detected capacity change from 0 to 4
[  565.124795][ T9403] overlayfs: failed to resolve './file1': -2
[  565.131829][ T9399] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  565.144734][ T9404] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  565.167919][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  565.179100][ T9408] overlayfs: failed to resolve './file1': -2
[  565.180099][ T9402] loop2: detected capacity change from 0 to 4
[  565.195340][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:26 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x8})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.221994][ T9402] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  565.307842][ T9399] loop3: detected capacity change from 0 to 4
[  565.350564][ T9428] overlayfs: failed to resolve './file1': -2
06:33:26 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:26 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x9})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.407559][ T9432] overlayfs: failed to resolve './file1': -2
06:33:26 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.517576][ T9437] loop3: detected capacity change from 0 to 4
[  565.524508][ T9437] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  565.569486][ T9440] overlayfs: failed to resolve './file1	': -2
[  565.579381][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.592457][ T9437] loop3: detected capacity change from 0 to 4
[  565.604295][ T9445] overlayfs: failed to resolve './file1	': -2
06:33:26 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xa})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.624186][ T9446] loop2: detected capacity change from 0 to 4
[  565.630392][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  565.631222][ T9446] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  565.663366][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  565.723677][ T9446] loop2: detected capacity change from 0 to 4
[  565.740291][ T9455] overlayfs: failed to resolve './file1
[  565.740291][ T9455] ': -2
06:33:26 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60106c02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  565.785774][ T9459] loop3: detected capacity change from 0 to 4
06:33:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xc00}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  565.828148][ T9462] overlayfs: failed to resolve './file1
[  565.828148][ T9462] ': -2
06:33:27 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xb})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.883638][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.891504][ T9477] overlayfs: filesystem on './file0' not supported as upperdir
06:33:27 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x57020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  565.961810][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  566.017682][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  566.048179][ T9489] overlayfs: failed to resolve './file1': -2
[  566.111297][ T9492] overlayfs: failed to resolve './file1': -2
[  566.137766][ T9494] loop3: detected capacity change from 0 to 4
[  566.149656][ T9494] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  566.191326][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  566.212443][ T9494] loop3: detected capacity change from 0 to 4
[  566.240729][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  566.259312][ T9414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  566.308629][ T9494] loop3: detected capacity change from 0 to 4
06:33:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:27 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xc})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:27 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x9})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:27 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  566.566883][ T9517] loop2: detected capacity change from 0 to 4
[  566.571929][ T9518] loop3: detected capacity change from 0 to 4
[  566.574700][ T9516] overlayfs: failed to resolve './file1': -2
[  566.580621][ T9518] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  566.630946][ T9524] overlayfs: failed to resolve './file1': -2
06:33:27 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xd})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  566.688137][ T9517] overlayfs: failed to resolve './file1	': -2
[  566.737953][ T9518] loop3: detected capacity change from 0 to 4
06:33:28 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  566.866666][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  566.872502][ T9537] overlayfs: failed to resolve './file1': -2
[  566.880157][ T9518] overlayfs: workdir and upperdir must reside under the same mount
[  566.923948][ T9539] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  566.947672][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  566.964399][ T9518] loop3: detected capacity change from 0 to 4
06:33:28 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xe})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  566.973195][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  567.009336][ T9543] overlayfs: workdir and upperdir must reside under the same mount
[  567.021827][ T9549] loop2: detected capacity change from 0 to 4
06:33:28 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x700a357b, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  567.101944][ T9554] overlayfs: failed to resolve './file1': -2
[  567.164735][ T9558] overlayfs: failed to resolve './file1': -2
[  567.168727][ T9549] overlayfs: failed to resolve './file1': -2
[  567.183634][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  567.228840][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  567.248032][ T9560] loop3: detected capacity change from 0 to 4
[  567.257510][ T9560] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  567.266002][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  567.360437][ T9564] loop3: detected capacity change from 0 to 4
[  567.395798][ T9488] nla_validate_range_unsigned: 1 callbacks suppressed
[  567.395813][ T9488] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  567.428105][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  567.498804][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  567.512283][ T9560] loop3: detected capacity change from 0 to 4
[  567.534967][ T9520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  567.654997][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  567.707138][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  567.715018][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60107402400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:29 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:29 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xf00}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:29 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x76624ea2, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:29 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  568.000381][ T9601] overlayfs: failed to resolve './file1': -2
[  568.002460][ T9603] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  568.016470][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  568.030849][ T9604] loop2: detected capacity change from 0 to 4
[  568.038550][ T9607] overlayfs: failed to resolve './file1': -2
[  568.048706][ T9605] loop3: detected capacity change from 0 to 4
[  568.065758][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.089816][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:29 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x10})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.090150][ T9605] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  568.137595][ T9604] overlayfs: failed to resolve './file1': -2
[  568.182437][ T9605] loop3: detected capacity change from 0 to 4
06:33:29 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:29 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x11})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.261432][ T9626] overlayfs: failed to resolve './file1': -2
[  568.279067][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  568.291417][ T9628] overlayfs: failed to resolve './file1': -2
[  568.319106][ T9605] loop3: detected capacity change from 0 to 4
[  568.327587][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.335754][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  568.350411][ T9632] cgroup2: Unknown parameter 'upperdir'
06:33:29 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60107a02400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:29 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7b350a70, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.385532][ T9638] loop2: detected capacity change from 0 to 4
06:33:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x1100}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  568.428949][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  568.429046][ T9639] overlayfs: failed to resolve './file1': -2
[  568.495969][ T9651] overlayfs: failed to resolve './file1': -2
[  568.505982][ T9638] overlayfs: failed to resolve './file1': -2
[  568.526215][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.532233][ T9656] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:29 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x5c, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:29 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x12})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.555423][ T9656] __nla_validate_parse: 12 callbacks suppressed
[  568.555462][ T9656] netlink: 181692 bytes leftover after parsing attributes in process `syz-executor.4'.
[  568.570627][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  568.616542][ T9664] loop3: detected capacity change from 0 to 4
[  568.628972][ T9664] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  568.629920][ T9667] loop2: detected capacity change from 0 to 4
[  568.655660][ T9671] overlayfs: failed to resolve './file1': -2
06:33:29 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x25})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.667604][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  568.689213][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.696464][ T9675] overlayfs: failed to resolve './file1': -2
[  568.698898][ T9608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  568.743136][ T9664] loop3: detected capacity change from 0 to 4
[  568.745183][ T9667] overlayfs: unrecognized mount option "upperdir\./file0" or missing value
06:33:29 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x13000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.797103][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  568.807407][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.815001][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  568.840227][ T9685] overlayfs: failed to resolve './file1%': -2
06:33:30 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:30 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x3a})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.909050][ T9687] overlayfs: failed to resolve './file1%': -2
[  568.916455][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  568.924285][ T9664] loop3: detected capacity change from 0 to 4
[  568.934226][ T9691] cgroup2: Unknown parameter 'upperdir'
06:33:30 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x81020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  568.972919][ T9693] loop2: detected capacity change from 0 to 4
[  569.008004][ T9700] overlayfs: failed to resolve './file1:': -2
[  569.015619][ T9693] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  569.064830][ T9701] overlayfs: failed to resolve './file1:': -2
[  569.069808][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  569.096682][ T9656] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
06:33:30 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x48})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  569.106753][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  569.110655][ T9656] netlink: 181692 bytes leftover after parsing attributes in process `syz-executor.4'.
[  569.151954][ T9693] overlayfs: conflicting lowerdir path
06:33:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4788}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  569.159426][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  569.178091][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.212701][ T9717] loop3: detected capacity change from 0 to 4
[  569.220031][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  569.244915][ T9717] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  569.286669][ T9723] overlayfs: failed to resolve './file1H': -2
[  569.325291][ T9730] overlayfs: failed to resolve './file1H': -2
[  569.342735][ T9729] loop3: detected capacity change from 0 to 4
[  569.458537][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  569.482687][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.494128][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:30 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x13000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:30 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8bffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100003400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:30 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x4c})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  569.532399][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  569.545827][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  569.616622][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  569.632108][ T9754] loop3: detected capacity change from 0 to 4
[  569.639465][ T9754] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  569.651502][ T9756] overlayfs: failed to resolve './file1L': -2
[  569.655654][ T9755] loop2: detected capacity change from 0 to 4
[  569.666297][ T9755] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  569.673070][ T9763] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[  569.689386][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.706808][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  569.708750][ T9766] overlayfs: failed to resolve './file1L': -2
[  569.715084][ T9754] loop3: detected capacity change from 0 to 4
[  569.746139][ T9755] loop2: detected capacity change from 0 to 4
06:33:30 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  569.789232][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  569.835449][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  569.848393][ T9754] loop3: detected capacity change from 0 to 4
[  569.862769][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:31 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8cffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  569.980712][ T9790] overlayfs: failed to resolve './file1\': -2
06:33:31 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7b350a70, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  570.020883][ T9743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  570.039151][ T9794] overlayfs: failed to resolve './file1\': -2
[  570.051518][ T9793] loop3: detected capacity change from 0 to 4
[  570.073291][ T9793] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  570.083792][ T9743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  570.101390][ T9743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:31 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x4888}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:31 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x60})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  570.138051][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  570.154738][ T9793] loop3: detected capacity change from 0 to 4
[  570.180492][ T9802] loop2: detected capacity change from 0 to 4
[  570.188227][ T9802] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
06:33:31 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa1ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  570.224227][ T9806] overlayfs: failed to resolve './file1`': -2
[  570.240480][ T9809] loop3: detected capacity change from 0 to 4
06:33:31 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x68})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  570.290749][ T9814] overlayfs: failed to resolve './file1`': -2
[  570.302126][ T9802] loop2: detected capacity change from 0 to 4
06:33:31 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x5c})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  570.389899][ T9827] loop3: detected capacity change from 0 to 4
[  570.398367][ T9817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  570.404296][ T9827] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  570.435080][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  570.440551][ T9839] overlayfs: failed to resolve './file1h': -2
[  570.456669][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  570.465193][ T9827] loop3: detected capacity change from 0 to 4
[  570.471451][ T9838] loop2: detected capacity change from 0 to 4
[  570.482304][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  570.487012][ T9844] overlayfs: failed to resolve './file1h': -2
[  570.531686][ T9838] overlayfs: failed to resolve './file1\': -2
[  570.554836][ T9827] loop3: detected capacity change from 0 to 4
[  570.620130][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  570.631461][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  570.639644][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  570.780290][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  570.791889][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  570.800185][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  570.866903][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  570.885190][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  570.893422][ T9840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100005400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:32 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x6c})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa24e6276, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x5865}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:32 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  571.024301][ T9882] overlayfs: failed to resolve './file1l': -2
[  571.040214][ T9885] loop2: detected capacity change from 0 to 4
[  571.059153][ T9892] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  571.071042][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  571.079280][ T9893] overlayfs: failed to resolve './file1l': -2
[  571.086376][ T9890] loop3: detected capacity change from 0 to 4
[  571.103858][ T9890] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:32 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x74})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  571.134157][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  571.142092][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.200119][ T9890] loop3: detected capacity change from 0 to 4
[  571.231083][ T9912] loop2: detected capacity change from 0 to 4
[  571.238097][ T9912] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
06:33:32 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa8010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  571.267046][ T9905] loop3: detected capacity change from 0 to 4
[  571.286226][ T9921] overlayfs: failed to resolve './file1t': -2
[  571.298424][ T9912] loop2: detected capacity change from 0 to 4
[  571.310405][ T9926] overlayfs: failed to resolve './file1t': -2
06:33:32 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x7a})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6000}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:32 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  571.412358][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  571.418521][ T9912] overlayfs: conflicting lowerdir path
[  571.460058][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  571.500768][ T9937] overlayfs: failed to resolve './file1z': -2
[  571.517623][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.527519][ T9936] loop3: detected capacity change from 0 to 4
[  571.547397][ T9942] overlayfs: failed to resolve './file1z': -2
[  571.547487][ T9936] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100006400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:32 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x90})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6558}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  571.637034][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  571.649339][ T9943] loop2: detected capacity change from 0 to 4
[  571.667566][ T9943] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  571.677023][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:32 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb3010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  571.688500][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.702658][ T9955] loop3: detected capacity change from 0 to 4
[  571.720425][ T9964] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  571.734121][ T9946] loop2: detected capacity change from 0 to 4
06:33:32 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mount(&(0x7f0000000200)=@nullb='/dev/nullb0\x00', &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000400)='exfat\x00', 0x200000, &(0x7f0000000440)='fsmagic')
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  571.794487][ T9972] overlayfs: failed to resolve './file1�': -2
[  571.827651][ T9976] loop3: detected capacity change from 0 to 4
[  571.831199][ T9979] overlayfs: failed to resolve './file1�': -2
[  571.850542][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  571.876588][ T9976] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  571.904079][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  571.906779][ T9984] overlayfs: failed to resolve './file1': -2
[  571.943429][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  571.954525][ T9984] overlayfs: failed to resolve './file1': -2
[  571.969188][ T9976] loop3: detected capacity change from 0 to 4
06:33:33 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:33 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:33 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic'}}]})
r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0)

06:33:33 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc02c7cfa, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  572.139780][T10002] loop2: detected capacity change from 0 to 4
[  572.139898][T10003] overlayfs: failed to resolve './file1': -2
[  572.152561][T10002] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  572.161040][T10001] loop3: detected capacity change from 0 to 4
[  572.176954][T10001] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:33 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0x9e)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)=ANY=[@ANYBLOB='barrier=none,smackfsdef=,subj_type=^&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,fsmagic=0x0000000000000006(\x00'])
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  572.194012][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  572.206470][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  572.207016][T10008] overlayfs: failed to resolve './file1': -2
[  572.220161][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.267010][T10013] loop3: detected capacity change from 0 to 4
[  572.289899][T10012] loop2: detected capacity change from 0 to 4
[  572.309703][T10028] overlayfs: failed to resolve './file1': -2
06:33:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8100}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100007400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:33 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc0ed0000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  572.361885][T10002] overlayfs: conflicting lowerdir path
[  572.381742][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:33 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
fallocate(r1, 0x10, 0x1, 0x200)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  572.420471][T10030] overlayfs: failed to resolve './file1': -2
06:33:33 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:33 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc6010000a400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  572.470507][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  572.488685][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.514315][T10042] overlayfs: failed to resolve './file1': -2
06:33:33 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipx\x00')
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  572.528993][T10042] overlayfs: failed to resolve './file1': -2
[  572.537627][T10047] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  572.539649][T10043] loop3: detected capacity change from 0 to 4
[  572.564468][T10043] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  572.595503][T10053] loop2: detected capacity change from 0 to 4
[  572.616728][T10053] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  572.622434][T10060] overlayfs: failed to resolve './file1': -2
[  572.648954][T10061] loop3: detected capacity change from 0 to 4
[  572.660881][T10064] overlayfs: failed to resolve './file1': -2
[  572.691834][T10053] loop2: detected capacity change from 0 to 4
[  572.778782][T10053] overlayfs: conflicting lowerdir path
[  572.784955][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  572.825714][T10061] loop3: detected capacity change from 0 to 4
[  572.836295][T10073] overlayfs: filesystem on './file0' not supported as upperdir
[  572.850234][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  572.858215][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  572.967820][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  573.006745][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  573.016168][T10020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:34 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:34 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000200)=[r0, r0, r0]}, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:34 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
fallocate(r1, 0x10, 0x1, 0x200)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:34 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc2412534, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8847}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  573.092365][T10047] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  573.202965][T10096] loop2: detected capacity change from 0 to 4
[  573.212138][T10097] overlayfs: failed to resolve './file1': -2
[  573.231552][T10101] loop3: detected capacity change from 0 to 4
[  573.244695][T10097] overlayfs: failed to resolve './file1': -2
06:33:34 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1/file0/file0\x00', 0x1, 0x2, &(0x7f0000000480)=[{&(0x7f0000000600)="6a0ed0f8ecdcc780d3672fe70d8678d87cde06c5b8f739fa7a3f976c1dd4b9ccccebc8c16955f2fdad7f6852142723f73e10ad3698cefed67292df33010bcbb9b16fcdcfed2eba356c74cdc01bc255f6725c0b41a357ce1934b06a9841a80a7161b521ba4b91ec22f7525d9e5b916ca82b040e9a0627480cd699effba460bee43595d50a9a3604a5ac2b681298ff78a89b226f95baeb7ee2506e1d2ce759b65810f64172dd3577c466aabf6d4913b002e8c0c5c33ba97a5127172f9c8fcc6397556344c080b58cdc40d15b01bbcef68e081b8f025dd8de52cc694df78fe125a34b", 0xe1, 0x7}, {&(0x7f0000000700)="3e13167d99e7a34c2f6db7820ea097d890ea7d1415b215f1a0f2901213d434eb19c9db044e5672e1ea741b3bd9ba36cd980dbc84b1fd5476d95bac87f6044079ca901253bd714b3c6b04e2c9fbdfd9e4e15fd59881034743f7612dabf520df40e3135aed8297121087a5abc6260fa80a4f8082a062085d66e743669cb7681c8b05e89852e7cf4b0cc788beb79f9d048b188bd74769627ed3ce0439fb08540252ddc5ccd13c1af9f225e18bb24e322c1f25ca30e2749f975522bcff121564d96c154576a25d95a699f5afc18a3eb348edeec740a1e5f48287fed5380f", 0xdc, 0x6}], 0x40000, &(0x7f00000004c0)={[{@data_err_abort='data_err=abort'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@pcr={'pcr', 0x3d, 0xf}}]})
open(&(0x7f0000000800)='./file1\x00', 0x80, 0x23)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  573.253638][T10101] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:34 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
fallocate(r1, 0x10, 0x1, 0x200)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  573.337683][T10096] overlayfs: conflicting lowerdir path
[  573.341434][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  573.351656][T10101] loop3: detected capacity change from 0 to 4
[  573.376599][T10117] overlayfs: failed to resolve './file1': -2
[  573.383149][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  573.402728][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:34 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc3ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  573.450400][T10101] loop3: detected capacity change from 0 to 4
[  573.481062][T10126] overlayfs: workdir and upperdir must be separate subtrees
06:33:34 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c36da085c73696967687b6144529e6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"])
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100018400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  573.503421][T10131] loop2: detected capacity change from 0 to 4
[  573.538827][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  573.632022][T10146] loop3: detected capacity change from 0 to 4
[  573.634300][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  573.643874][T10146] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  573.658315][T10131] overlayfs: conflicting lowerdir path
[  573.660588][T10151] __nla_validate_parse: 20 callbacks suppressed
[  573.660602][T10151] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
06:33:34 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  573.679708][T10152] overlayfs: unrecognized mount option "6Ú\siigh{aDRžlowerdir=./file0" or missing value
[  573.681772][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  573.713147][T10146] loop3: detected capacity change from 0 to 4
06:33:34 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@private, @in6=@mcast2}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0200000018f95314c0220b5bc8c3771d21b2b33ed9f6c325a76783d62f654c7cf1ec57defd19146e31a27905741167e28f53a903b25cfcbe9334e86363e6268d253ab39d274b5ccc9d10fe9d1aaca32857daa3cdaf08a01fdd89833fab5645b7280de043e3d6e0f5bb65a8358dc18eaa02e3b5261cbed5886252f55356967df4d8679154845a854512a166cf82789e8155008d96ddbc7ca7c02385", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0xc01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@bridge_setlink={0x8c, 0x13, 0x800, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x1080, 0x50114}, [@IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xa}, {0x8, 0x1f, 0x0, 0x0, 0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x7}, {0x8, 0x11, 0x0, 0x0, 0x9}]}}]}, @IFLA_MAP={0x24, 0xe, {0x8000, 0x0, 0x1000, 0x7, 0x54, 0x4}}, @IFLA_BROADCAST={0xa, 0x2, @dev={[], 0x44}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  573.728072][T10158] overlayfs: unrecognized mount option "6Ú\siigh{aDRžlowerdir=./file0" or missing value
[  573.763467][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  573.829181][T10146] loop3: detected capacity change from 0 to 4
[  573.871375][T10166] loop2: detected capacity change from 0 to 4
[  573.891563][T10166] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  573.954907][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  573.981249][T10178] loop2: detected capacity change from 0 to 4
[  573.989307][T10180] overlayfs: failed to resolve './file1': -2
[  573.989611][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  574.009965][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  574.044715][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  574.064950][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  574.110623][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  574.135588][T10166] overlayfs: conflicting lowerdir path
[  574.204719][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  574.231994][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  574.243760][T10105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8848}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:35 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xcc260000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:35 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0324fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

[  574.316213][T10151] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
06:33:35 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x101800)
write$P9_RREADLINK(r1, &(0x7f0000000280)={0x16, 0x17, 0x2, {0xd, './file1/file1'}}, 0x16)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  574.365258][T10173] overlayfs: failed to resolve './file1': -2
[  574.420460][T10203] loop3: detected capacity change from 0 to 4
[  574.432174][T10203] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:35 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
r1 = syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000280)='./file0\x00', 0x800, 0x84)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000200)={0x8001, 0x80})

[  574.498023][T10210] overlayfs: failed to resolve './file1': -2
[  574.536661][T10213] overlayfs: failed to resolve './file1': -2
[  574.606956][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  574.620741][T10203] loop3: detected capacity change from 0 to 4
[  574.633799][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:35 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd2260000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  574.690677][T10223] overlayfs: failed to resolve './file1': -2
[  574.724263][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:35 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
r1 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000200)='./file1\x00')
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x20080, 0x0)

[  574.739835][T10223] overlayfs: failed to resolve './file1': -2
[  574.742420][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  574.801439][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  574.811281][T10234] loop3: detected capacity change from 0 to 4
[  574.820581][T10234] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  574.842292][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  574.851491][T10238] overlayfs: failed to resolve './file1': -2
[  574.862027][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  574.870367][T10234] loop3: detected capacity change from 0 to 4
[  574.876532][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:36 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="f1c90001", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  574.919117][T10243] overlayfs: failed to resolve './file1': -2
06:33:36 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100031400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:36 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd8ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  575.020856][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  575.030208][T10198] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  575.048317][T10251] overlayfs: failed to resolve './file1': -2
[  575.057505][T10198] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'.
[  575.077166][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  575.103091][T10259] overlayfs: failed to resolve './file1': -2
[  575.127487][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.136600][T10261] loop3: detected capacity change from 0 to 4
[  575.144681][T10204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  575.145327][T10263] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[  575.177008][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  575.187377][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.194447][T10261] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  575.196166][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:36 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:36 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:36 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:36 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xe4ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  575.285517][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  575.305589][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.314391][T10214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  575.371495][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  575.386375][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  575.434766][T10286] overlayfs: failed to resolve './file1': -2
[  575.460177][T10285] loop2: detected capacity change from 0 to 4
[  575.460591][T10287] loop3: detected capacity change from 0 to 4
06:33:36 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
r1 = syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r2 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000200)=0x80000000)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@deltaction={0x74, 0x31, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x189}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa7a}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0xa8000, 0x0)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'lowerdir'}, {0x20, 'overlay\x00'}, {0x20, 'U'}, {0x20, 'subj_type'}, {0x20, 'z]}'}, {0x20, 'subj_type'}], 0xa, "75e81e65234294953ad7a6d21070cfd3cfb28c2ed1b9019f0b32d1cdfb8586603d328d57f8320539ab73d20f9dc812bf67d9"}, 0x69)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  575.485775][T10287] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  575.487589][T10285] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  575.516773][T10286] overlayfs: failed to resolve './file1': -2
[  575.563263][T10287] loop3: detected capacity change from 0 to 4
[  575.580805][T10285] loop2: detected capacity change from 0 to 4
06:33:36 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  575.641914][T10285] overlayfs: conflicting lowerdir path
[  575.651756][T10304] overlayfs: failed to resolve './file1': -2
06:33:36 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
rt_sigpending(0x0, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  575.701009][T10304] overlayfs: failed to resolve './file1': -2
[  575.701381][T10313] loop2: detected capacity change from 0 to 4
[  575.715074][T10313] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  575.725874][T10305] loop3: detected capacity change from 0 to 4
06:33:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:36 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf4ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  575.766275][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  575.778448][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.789423][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  575.797373][T10313] loop2: detected capacity change from 0 to 4
[  575.828227][   T36] audit: type=1326 audit(1616135616.903:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000
[  575.844673][T10324] overlayfs: failed to resolve './file1': -2
[  575.877943][   T36] audit: type=1326 audit(1616135616.903:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=127 compat=0 ip=0x466459 code=0x7ffc0000
[  575.901620][   T36] audit: type=1326 audit(1616135616.903:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000
[  575.925162][   T36] audit: type=1326 audit(1616135616.903:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x466459 code=0x7ffc0000
[  575.953919][   T36] audit: type=1326 audit(1616135616.903:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=77 compat=0 ip=0x466417 code=0x7ffc0000
[  575.977742][   T36] audit: type=1326 audit(1616135616.903:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x419544 code=0x7ffc0000
[  576.025462][T10326] overlayfs: failed to resolve './file1': -2
[  576.039937][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  576.050607][   T36] audit: type=1326 audit(1616135616.903:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=3 compat=0 ip=0x41926b code=0x7ffc0000
[  576.080215][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  576.113896][   T36] audit: type=1326 audit(1616135616.903:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000
[  576.142046][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  576.151726][T10337] loop3: detected capacity change from 0 to 4
[  576.163916][T10337] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  576.186226][   T36] audit: type=1326 audit(1616135616.903:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x466459 code=0x7ffc0000
[  576.211832][   T36] audit: type=1326 audit(1616135616.903:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10323 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000
[  576.301710][T10337] loop3: detected capacity change from 0 to 4
[  576.386756][T10342] loop3: detected capacity change from 0 to 4
[  576.415301][T10295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  576.430148][T10295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  576.437819][T10295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  576.505464][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  576.516086][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  576.523630][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:37 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc6010003f400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:37 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:37 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
chdir(&(0x7f0000000300)='./file1\x00')
r0 = creat(0x0, 0x0)
r1 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0x145)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000400)='cramfs\x00', 0x240000, &(0x7f0000000440)='subj_type')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  576.556816][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  576.569986][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  576.580131][T10301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:37 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:37 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf6ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  576.675912][T10374] overlayfs: failed to resolve './file1': -2
[  576.701293][T10376] loop2: detected capacity change from 0 to 4
[  576.710565][T10376] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  576.724858][T10374] overlayfs: failed to resolve './file1': -2
06:33:37 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:37 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000280)=<r2=>0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r3, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0eaa903", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000002d93ade8ad9a4a2a35ab7568880964d8faf72aa4769e6961116164c953ccf077d6010af3b9cabb2ab4064f94cbaad2fb3530c1c6711d999338a4b42243fedfaf443ef02ecaa43b92ef5d1413fdd83c06a392f4016983946d996ffba6142667685848", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB], 0x8c, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={<r5=>r0})
sendmsg$nl_route_sched(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@delchain={0x74, 0x65, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x7}, {0xc, 0x4}, {0x2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_INDEV={0x14, 0x8, 'hsr0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x4)
chown(&(0x7f0000000200)='./file0\x00', r2, r4)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.current\x00', 0x0, 0x0)

[  576.793317][T10390] loop3: detected capacity change from 0 to 4
[  576.809041][T10390] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  576.819993][T10376] overlayfs: conflicting lowerdir path
[  576.872626][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  576.881070][T10390] loop3: detected capacity change from 0 to 4
[  576.950024][T10408] loop2: detected capacity change from 0 to 4
[  576.965784][T10407] overlayfs: failed to resolve './file1': -2
06:33:38 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf9fdffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  576.996437][T10417] overlayfs: failed to resolve './file1': -2
[  577.004731][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:38 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB="08001000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000400000f9ff20"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x80)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:38 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  577.056695][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.146827][T10425] loop3: detected capacity change from 0 to 4
[  577.153178][T10424] overlayfs: failed to resolve './file1': -2
[  577.160107][T10425] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  577.160689][T10428] loop2: detected capacity change from 0 to 4
06:33:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  577.202506][T10424] overlayfs: failed to resolve './file1': -2
[  577.234675][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  577.278970][T10442] loop3: detected capacity change from 0 to 4
[  577.287416][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.301745][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.372481][T10442] loop3: detected capacity change from 0 to 4
[  577.496697][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  577.527345][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.543319][T10389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.610514][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  577.629897][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.637617][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.679212][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  577.691155][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.699837][T10404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:38 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100040400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:38 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:38 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB="08001000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000400000f9ff20"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x80)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x110}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:38 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfa7c2cc0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  577.834948][T10470] loop2: detected capacity change from 0 to 4
[  577.865618][T10472] overlayfs: failed to resolve './file1': -2
[  577.878315][T10474] loop3: detected capacity change from 0 to 4
[  577.903101][T10474] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  577.932400][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:33:39 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)=ANY=[@ANYBLOB="6261727069656b928bba9e723d6e6f6e652c736d61636b66653d5e262c", @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,fsmagic=0x0000000000000006,\x00'])
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd3, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffeffff, 0xffffffffffffffff, 0x3)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  577.947408][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.956051][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.978375][T10490] overlayfs: failed to resolve './file1': -2
[  577.984791][T10474] loop3: detected capacity change from 0 to 4
06:33:39 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  577.999505][T10470] overlayfs: conflicting lowerdir path
06:33:39 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x7)
r1 = open(&(0x7f0000000280)='./file0\x00', 0x880, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  578.041759][T10499] overlayfs: failed to resolve './file1': -2
06:33:39 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfbffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  578.085795][T10501] overlayfs: failed to resolve './file1': -2
[  578.108346][T10491] loop3: detected capacity change from 0 to 4
[  578.171476][T10509] overlayfs: failed to resolve './file1': -2
06:33:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:39 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
r1 = syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000200)='./file1/file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008e50220", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="080000006f5d4076817178f8cd53cc3d91c7a65386a8e947600361888e205b5f46d7c6b68641c1db16405d666c9e072942f5ceb6297bd996de213c3758a7a21c8a036b9a188fa9eb33443a1b29d1514eaa749ee5b20620d273e98413420d262fb7fd58733f1e399446372f14fbe85f5c5ce3494f606abea029628cce8b2a2bab5347dad89d", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r1], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,worktir=./file1\\\x00'])
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  578.213353][T10515] overlayfs: failed to resolve './file1': -2
[  578.225546][T10520] loop3: detected capacity change from 0 to 4
[  578.236119][T10520] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  578.289816][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  578.306205][T10520] loop3: detected capacity change from 0 to 4
[  578.344808][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  578.347056][T10533] overlayfs: unrecognized mount option "worktir=./file1\" or missing value
[  578.361318][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  578.384716][T10520] loop3: detected capacity change from 0 to 4
[  578.404316][T10542] overlayfs: unrecognized mount option "worktir=./file1\" or missing value
[  578.497085][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  578.529550][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  578.554469][T10488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  578.590150][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  578.603657][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  578.611271][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  578.622692][ T4841] ==================================================================
[  578.630790][ T4841] BUG: KCSAN: data-race in dput / vfs_unlink
[  578.636777][ T4841] 
[  578.639093][ T4841] write to 0xffff88804c79f9c0 of 4 bytes by task 5302 on cpu 0:
[  578.646722][ T4841]  vfs_unlink+0x289/0x3e0
[  578.651057][ T4841]  do_unlinkat+0x29f/0x4f0
[  578.655502][ T4841]  __x64_sys_unlink+0x2c/0x30
[  578.660188][ T4841]  do_syscall_64+0x39/0x80
[  578.664608][ T4841]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  578.666394][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  578.670518][ T4841] 
[  578.670526][ T4841] read to 0xffff88804c79f9c0 of 4 bytes by task 4841 on cpu 1:
[  578.681527][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  578.687548][ T4841]  dput+0x34/0x430
[  578.687582][ T4841]  path_put+0x1b/0x30
[  578.687595][ T4841]  do_readlinkat+0x188/0x200
[  578.697915][T10497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  578.698768][ T4841]  __x64_sys_readlink+0x43/0x50
[  578.719410][ T4841]  do_syscall_64+0x39/0x80
[  578.723829][ T4841]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  578.729748][ T4841] 
[  578.732076][ T4841] Reported by Kernel Concurrency Sanitizer on:
[  578.739177][ T4841] CPU: 1 PID: 4841 Comm: systemd-udevd Not tainted 5.12.0-rc3-syzkaller #0
[  578.747899][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  578.747913][ T4841] ==================================================================
[  578.783019][T10544] __nla_validate_parse: 18 callbacks suppressed
[  578.783036][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100064400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfeffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:40 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x501200, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
open(&(0x7f0000000480)='./file1/file0\x00', 0x12d500, 0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)=ANY=[@ANYBLOB='barrier=none,smackfsdef=,subj_type=Z&,euid=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,fsmagic=0x0000000000000006,\x00'])
r2 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', <r3=>0x0, 0x29, 0x5, 0x7, 0x2, 0x1, @dev={0xfe, 0x80, [], 0x36}, @local, 0x8737, 0x8, 0xfffff592, 0x1}})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@getchain={0x44, 0x66, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {0xfffe, 0x5}, {0xffe0}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
lchown(&(0x7f0000000200)='./file1\x00', r1, r4)
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000500)='./file0\x00', 0x180)

06:33:40 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
r1 = syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000200)='./file1/file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008e50220", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="080000006f5d4076817178f8cd53cc3d91c7a65386a8e947600361888e205b5f46d7c6b68641c1db16405d666c9e072942f5ceb6297bd996de213c3758a7a21c8a036b9a188fa9eb33443a1b29d1514eaa749ee5b20620d273e98413420d262fb7fd58733f1e399446372f14fbe85f5c5ce3494f606abea029628cce8b2a2bab5347dad89d", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r1], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,worktir=./file1\\\x00'])
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  578.984049][T10573] overlayfs: failed to resolve './file1': -2
[  578.991842][T10575] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[  578.993851][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  579.019875][T10581] overlayfs: failed to resolve './file1': -2
[  579.026071][T10580] loop3: detected capacity change from 0 to 4
06:33:40 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0x6)

[  579.036852][T10577] loop2: detected capacity change from 0 to 4
[  579.043357][T10580] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  579.054891][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  579.099013][T10580] loop3: detected capacity change from 0 to 4
[  579.101718][T10577] overlayfs: unrecognized mount option "worktir=./file1\" or missing value
[  579.137803][T10594] overlayfs: failed to resolve './file1': -2
[  579.139634][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  579.162456][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:40 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100040400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:40 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
r2 = syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000009300000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="040000000000040008000000", @ANYRES32=r2, @ANYRESHEX=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  579.212184][T10598] loop3: detected capacity change from 0 to 4
[  579.246261][T10594] overlayfs: workdir and upperdir must reside under the same mount
06:33:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  579.368684][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  579.408257][T10612] overlayfs: failed to resolve './file1': -2
06:33:40 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='cpu.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="0200"/16, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10e42f2d2d00000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={<r2=>0x0, @private, @multicast1}, &(0x7f0000000680)=0xc)
bind$packet(r0, &(0x7f00000006c0)={0x11, 0x16, r2, 0x1, 0x4f, 0x6, @multicast}, 0x14)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r3 = getuid()
setreuid(r3, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x4000, &(0x7f0000000400)={[{@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}, {@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}, {@xino_auto='xino=auto'}, {@index_off='index=off'}, {@workdir={'workdir', 0x3d, './file1/file0'}}, {@nfs_export_off='nfs_export=off'}, {@xino_on='xino=on'}, {@xino_auto='xino=auto'}], [{@subj_role={'subj_role', 0x3d, '!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'subj_type'}}, {@subj_user={'subj_user', 0x3d, 'cgroup2\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5e}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_gt={'fowner>', r3}}, {@obj_role={'obj_role', 0x3d, 'workdir'}}]})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000600)=0x9)

[  579.420983][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  579.434463][T10618] loop3: detected capacity change from 0 to 4
[  579.440767][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  579.445994][T10620] overlayfs: failed to resolve './file1': -2
[  579.451197][T10618] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  579.463834][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  579.531068][T10618] loop3: detected capacity change from 0 to 4
[  579.573440][T10618] loop3: detected capacity change from 0 to 4
[  579.574037][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  579.590917][T10611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.2'.
06:33:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100003400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  579.622688][T10626] overlayfs: failed to resolve './file1': -2
[  579.635507][T10643] overlayfs: unrecognized mount option "subj_role=!" or missing value
06:33:40 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  579.687746][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  579.704311][T10643] overlayfs: failed to resolve './file1': -2
[  579.717066][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  579.724809][T10574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  579.725515][T10626] overlayfs: unrecognized mount option "subj_role=!" or missing value
[  579.798310][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  579.818986][T10656] loop3: detected capacity change from 0 to 4
06:33:41 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
r2 = getuid()
setreuid(r2, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=r3, @ANYBLOB="02dee0c1db04ee7245cfdb33a5fbf7a0eaa903", @ANYBLOB="3849de9e0e67c83c06f2f21f97d61ff3726919f087d052ee87507d365790b90367c0a730263625c7e5c492cbb754119256b96a7367edd275700d5f2f7816784ccb93b2f4fcfc9cf4a042259aa0aa1e049002000000bb4677f5137ce1353f105c76ec78cacbb4a432df3ebfea7b4f957b64ae13d22b8154a880d75f00d1f5f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000002d93ade8ad9a4a2a35ab7568880964d8faf72aa4769e6961116164c953ccf077d6010af3b9cabb2ab4064f94cbaad2fb3530c1c6711d999338a4b42243fedfaf443ef02ecaa43b92ef5d1413fdd83c06a392f4016983946d996ffba6142667685848", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB], 0x8c, 0x0)
r5 = getegid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="f7e5d2ca24038bb6c8e8120f00b9bd1f2a45cae01971ad4781824c5aae80e646a7647d05b5ae20d5f1ceef2025461f2d123d21f93ed88c6c74121062ceece4a3c8d1f7a045eca4f93f733bf0739bb556a9ac4456711f374f0d928cccf211d85e0428ee1852403e6ddae9e3d1a822ad3cfbd228b175c232fdf8e0b673c5d5dbe2ecea3b32b0c889e20892077d4262c48cd7b5b334b13aa57d64a8a5e56b51fca2a57309e3671fe49e0dcbd03adde2c495c9a65d5dd0cba444951c3511a4b029cd305da9fa7a79345f2988a5f04f723b1531a85320a1bed8ccc1115eb56ae7ee7c382d40cb35d750df8418e21abf021f31cc7e79ffb7b2f1a76785f47638271a769a1a78073f8267d2a3c5b13c10b08e57e9de1948ee60b45e3476ab74d46d007f5c8c89e91f5e46084fdd7c3a019df0d5f19db549e3a337f9f60922f3af014f419bff7c255373d528b7e24cc04e928ccb4b3b90c11a0ec9d090bcee571010a844503601824a4d045efdc825c1715e6b3388349c38bf5ffe6d156bf78dd93555c0cdc04ac2984fa825b61f5f2f6a7f7b078c9efbbd0a2c49f637153775b595860d1133d7566afcd1a81ce18d485ad61d0b6615a608991583b85919302eb7be4c1bba6782735ecab196707a29fdc2e934797b53804fc3ef95fbe39f11dad5e3ac9409365d8ca37541115bef59219b9c05847368a3770ac4b18dffe1a00e12de6df7fcafa7c76cbd0e88854b5aefc992564d8913e04ff73eb0a5265a83a1cb34b58d79e83b20bceed05fbef8a046290bedbc5559e79ba445a75ea3dafb88874741ae38cc6c6ac6ddb92dd19bba4cac634f7a26938540661e7ec948b47dd0170f4f84b01d06b5c5a5c492b8a2ccef10ce30d38a1b171bf4f89486e14a22d44157a41298063a52e7df34f03b048b1dd3f86268feefba899a25bc1d37c7822e1b4e2243d8833e41aaaf26886a7205ab116aec30b9568a4875a14bde3aa9ae7f5933352133552df949d7835da13cebd95064fb48ede219f83591c8a97727edeed29ecc2064b78530184cd29e8deb1c533d9970844abc6a0ec649f3a5b900d4c573983eabf87d4c0b97ef63be59d01c7ef1d673379e590d78921101a3a4ba5cfea0f35f86ab330d5bc82c9dda2ecb4ad313064ae736cc08dcdf94bb91711cad0b2e188725ea96241d73f4252c7785f5bb8ba7790d2cb2cc231db78520b3c511f373c7dae9959e9bc5c3cdf1218ef9f18d80a6673962c966f4167904f9086417a15c104e8d60130436793b00e3645d852371322c95b04e501df51ed92afa5df83b1e233afd677a140dfc6f4d73ff8487d0c0a81a6e7f69455850737fb64558c916bbbaaf3c67bbd9d5967a0049a65f6a1fddc567be55d08ded58474499c999cac40ea624c90838a4b147deb67fc9d756586d4ea558bf6074905d61430ab3c560d2e8c3a781b72112d50b98f1108747482f9b90a3a4c19e85e5211aa8bcd78affd33c3ef12d9e20cc6c4244a7711dcdb81ee8d46ddad92b83d14b5e2781793fa61fb7c09b531d9359ac5220a61781ca3e49a7349dfb8d8d0e2fe12482250e17940799f99e75bdd47938e02c400a6b0db5db85ca1464fc76ed93037473187b129bbcc23533e0219eea22e3e7d9c2f1a9aa41ac49cca3e648aea87c2199a4bd60e60c6ab2e065621cb916fbaf4baac6b4a9a59f6d9d6091edbb7a2c7a3896287d549fdf102cca8b861e0afe140637591248dae4ec8d39587ed7cecd2a00e193c834ac7681d800c5902374cd8c377f9d54b69dbc700e23b8c2c13ed703fbee464b0571a790927edbfda11e3f83eaad7cb870723dd4f461d8416a877757772bb935c6a262d1b1d7f9ef97cebca47849f9c26350383787df0fb71802fd0bee1f980bbc8abdb4f5d1915f5b9b1d1dfcb56c9692e3b92744e51087a220f646c66018558fb1e1e5e09578da98a51e45e2dbf62b9586de0c303ccecb4c0c49e2cfe4c4c70c56cfe450bf970ad1b6bfa14ea1e3c6e5aec20c1c6aac2a7bc9b79f784adf9fb5d959346fb6390a65229da14e112ab21b72b4e3c00d172e40d7ce80d0fe70d8a81d6c795732ff2cb27f481d9cc790190bd54546498f94f27a3484020d0f9b70b3a5ea3279ee4d5cb55009ce0e643f18eca6dea317884e15ad1992a6b732dc9590d5c0f76e759dcccfbeae2577fb72ce1cc51ac1fe11e72156f192bf392f0646ce2c2cec115b1db216000177a01d8b2455a368ca9007a786dcef16003e41e3c38772f65d019018b46960e1b48ab8f6ef6329d8620cb43106f0b8fd6028af7acd687ba761a9fc07225dadb8e8564ea761852b41858aa133febfb9bfc702ba65f5ffd2c4d03acf5d9b388f51f154edb27ce6f52a3cbf2aea1adb1c14e723c7e18ae59c6f5e603afd06d6cde95db7fa151de85c0df72ffd444739474620c75c29bfbab56b52597ee1916721030e8a3b0c26b32de780dd54a9edc0b6f4bc3518d92bd6cd0b79276b2d7e145e1b5ec4ffb846b15fefb7d66036fc053172a373cbc425255658be097aa4082ba9c8dd517de6863a30425e57ff625947fc39e7bb9f78c76dfcd5468c8998052b540698f692414e20b318ba2669daf480e42b025934e6c0d0cc2540ca5597cbfaaa7c4e7fdb96996143e20480b952d9f34163dda3d104fb600ab96ae1e8b2d3242f3ce70ea468ea40a54f9bc2813e71aad4042f1410836d04e8fdf25c8391cbcd7b5e3810fb7dc945370a4cb04a87769e369a3f10edf96e07a3a9200e518a46b6f93a109c905d736e9fc3b44370c29f26cc13b0bdcf50a5ceca42ed8ca8d7dced588c28fbbd87be4599c29b8f284a2d9eb103d3f34f03197c83123840755f7aa37f57425e19debfda98da27e3d495a848cbfd94a9a39e6d1f0b935e6e0f6a9b1ea3d3c0b49d7ee097d93a19cb21a9e5dff92998dcc2558fa4a7a99a91562c15d99019d5ae4bb9839cb3431fd6207c123ab05714a79203f5f40be692a873c68f458ab33966994dd266ae6f3dc8196a45e48d5034805c71276f223a517a1e862297a166dad8159f20c17accb87cc80908c5b7ef751714eb36166c9161f7e0345572ac4ca54d9f34d9116cb28dfa040a6ebbe37c9c79f4bf043b3c940bdcc8fef0d67fea25f806dc5c98e006b6d43f577affb35a62c0165dc6ee15006db04b931f4ddfb46afe6431d5d00f50cc8fc0a69696ad1f8fe361b386910a69fc6aecc483bcefa357c1a5cbea0ea7c0d2632b903b96b8677b0a3fa3c35c4af63a62e1da6c753229b48fbec187ca2d02c35bb257a4e264c39a1ddd5c3995032c9498acb21006e207b4d4e9e909bc8c2887ee3a43eccbcd4c4eed88778f50a72d6a8b039f9071560e1b1360d9b554e3c2bcf2de6fccc1b72d26052bbf7229bf6d79b76d2195eead6ba1b167e3ac57b2819250dd77cd1ed088217a50dc0d1d96c1584214ce355dcb50e60859630bea2f27b8cbd1d4b4399daea6da336005a537ac7de291cf05183731fb78108e20481e4114c42fa1f131395d8df6fc023c67524be79f86137caa3c9a680728019d6b3eb1c3eeeebc3ef4510fc87a82d235bece02ac50218b7312f5e5308a602bf9bd9b571a46f16362b9572fb444ba14d38eb8c7ce23ed724734d1c8030b68b211631ffe3aab2480013989e2e684df638f520d1b8f6b338f44fd6f8dbf58a49ca2d2579ebbbce3da50c209b6fb03d802658dcfc568fd4db4e76c2210aa67cb4751282acf113f21abe85c6febb7bfb1cef9c1e84130cb5d7a8d6f9478e1c3840b574c63d9399a6052018f1845476407f68753014c12e97df2515d38a6376d33d379c060b69879be2709e6b4dff8780c4e5716d0c1cf2b9261193eecd615402706c6b4157475974cd7b392696bb258ea37fd43836fbb324a513993981435a3951dc3b7330ac8b0a98fd83399b2b27df25e180afda0a9a422432fea41f75d68af5be3a2705bfcb05a8f46578e925f254a65673552a733e245e239e2a47c27bb2116acb3946f9b0e7b6871fa8f33881a682ea127648cae853e44cde1eef3e14bb5b4349fa2daab4f11c926f11dfe70210b2b2ead3c5309a880669640656177a1cfc2100d4da128938e884b9fd39e1ae90a8fa39b1e6531f2198d211a85247a7680399826c4ab9de323025df2332f95bf20bda05a78f871e54c7158e497cc1a304d10b3147b883b4d2d6abd1eaa8694bfe4c32420eecb429b184e9960f5d0f35852c1a33ad98cb4ae9b5e22d16b13dc40ff9a2f86228e2ce2b8e2c660fd0b1d193c968eafc415c098aa18700a1cb98f8580a23a5a798b4cdc7fdfeca4837fba0be0fd494832b56b7b78d77dcc98e8d191c9b5001a4fee3e8e805fa87e888a0a6fb36bad8576676c62843714733f317324bd5e7effff7c0f2222f713ad95f83ab11b069adfd8287b9d427c381ff1b66e641deb7202a14e2accda85db1bd64e89d14c04e9ca04569afb0be31fee6f1aa631b5a250c9d41cc41606d5bd1d68d7a9839c1cf2c39a591155731bc6abfd6ca959da108ba6425316d07267ffcd7ff2873a5cc290f8f934b454c09d34629a92cff233b39e82d9e486890114d6e02e54ed5f0636eb4ff0ff0a634700ab084bad90a4264c838b7c0a58112829ceb64a4dd6604c56e6935f5b288d35b972dea6456f2410c4ea8ffcd7fe3e8bfc76a8b05326c359f9639b1111040a0488c5a1847bf8c75a3814190901e1fedc92166aa3ad28f9978f69168fc4858b6533f211ea3be3f4a6b1ae31f5329ab7b4bdcaac8874d508418016b109c72db8b2fa2bac5f47752c103411977f82cc9ee171677a174e1f1dbf018ee35e9eff855b21dc6aad3673d337b33a3c713739dfde44c5c36b97d5c7486256e538702b407e77d04c50f1f111b13d43575049df4f9941fcb59fdeb85f0e0faf2d80eda2289a98591dcbf01493668a70cc4c02dc35bb57dd9ac411339fb443c0eb23017814124db3aa7e493ef8efaad10ab521f224f1691b312dc52310ddbf7347371aed7b13861b01e5df0df71dedb15e8bd04175ff8e9d09aac076bc35c3d8661837242ca8491a202f44120b867e1a526653ad1d599de8bb7177d44b89fd73eea5beaf7d5cfe64827d7fee2893c7158ba4bba73e6e2b94f01c08541f8b34607346b6cb44cf25c7e76617fa55ab7cda8f3d56a4ac989f9fae2c1a53562a597c434debfd44765e3e0062e9dfe8d2c01bddd29c2c7fe504a065f4b8a5273ee439b0a3dd99bd16f2b804f5debb9226c661556248934d37912565458ba20d184c1d1c7fcce621ccd261ed6c0d42d54a8112507caab97dad76b4306c55c260984f547422e6fee818da454db46b43e942050d9408e8177eeacf6b1c8127ccdb15e26d6b63c6776640b814189ed61ffe216966b59a4deb60e313539bf46d1a69b9ade5aa934025011333f1389c7ab2a96fd446b14a9ec026407f2949751da4194171cd0a5171b7f41e05a63468011cfb970c89f0f8fdcfd8a62ab5aed054df3a7e7a5a74e7cd49ddf8e0093b358b2d65e375c45c4a45f5564146cd783a8dda544f0f17eca14261a8355e40242a24e2ae8e3f7286442fe9d9d78cc9e2ad8ae377783cd7aba1582891b3d7158aa0d7ad4bd8ed152fe33d954e7be19f4079cbe6fd133c786b1c90004548623e85adbab8b24129e39d9e4b6ac893344c793c8b2b02d6d86570ee7c30159f89e06166e029f914d28bc5ab5cc6dc2cdd9eb0e489338b4b98ea4605332996f6ba1cbb0d72397e185939beb4431611a83c6db3f656352e0dd097e6a23d7585f83c311f8c080180f32a7a31ad6f75e058f1cdb64acf1a67ed30c069b2c3b3d273f429a893b31593c3137b822c4496a85d3936d3fa8c12fabb0a53c00ae579e35ec22c9b8edd4bfd2730d9e5452843486b96e9b4fbab486228bbdcdc946e719d9f5b66fdbd4d9860d269617e3f4f60ba461e19b29cff706bab012d1844f4ad46d83b0e46629cb2763e8ec87b67499696bd48c73192f5f6388039605ce5ae82657343c8055873209279eeccb5c1c03c98e4e8116aa00111e20bbe6c31899b8fe127d234ae621b74fdc3f2b5370d1bfc15193feed51a0b0767de4d832fa34519ddcee5e2948ea01c5952adee4d8e988160271b206146af8051ca3675b88a9b65e3e4092ad9c1392c7faf1f2114915cbb23fcac6c9d744e6999d0479e9c18ab578dbb9e3e82218db95c6cfac5c852ca419da2df10aacf5f8e2b76317fdf49a3aad6607251d4a91a8b336421bfee0df6455cf6b25e2109a84605aa0cda6c256a2a577c5dce852fae55b7376e6c267b5494b21cc9a5dc1a6167dad29f74b3eff6437ec0ed5282b3b8fa077834f2251514cd53718de9de9a41d631f19802af49b0268e76c683fdbcbf5adaae4495aaa2da04c3ab41bb039232c870a190da6ef8226972f7250c3c8f82af9f227e45b1617374666df0b5e2394593ec3a9a9d578f35acafec2fca8facc857df55f37c676c389494be6d255c5f759e2f95ca180bdd8fdecac365a1ce1cfe62c27baed41303f563f81730826765ec3c035815901091c1725aaddc0ed27d9d487d6c5c0d4af8de87846b594f230c551904f55740cafc7b603758bf9a1d1d09dda784afef34225fb55213ce26482bdf489804fb07622b837b3e9828d1ea290a29392f243e88db9b4b82484a131955491542e7f7d81fe92e2708a64571388f30f52bed4e22a0f7859ea1b8f6c14d0ec6b3b511ccf4fc0b8ef72c169d2977bce63ffd61ca7e48d88cf99225607b7ea9042282958a212a191478a41f123e78512a939ad9020e19bd58ddb09010d7a83bffed5ba14f9689a60eb94da17c37177eecbcd17b021604a126cb69f8b4605d84a301d819b5506215ee9d07d787737dd08008171e6280dacb1a28c3b2d5d041d02de16e80e7df5daf93d68acb4bdfe582d9ea00f60e4c9d2b8dd78c999cb229de850526caf08bb09012bb56694deeddc428ae6cb2e3a4cf637edc88537921e1cd9d5aa7def96779d08742995c3ea7e781575ff8b8251099bfe6a778eb05c5453992a4f981cdc156333328062187cc34a60ea6813dadbf2bea2bccc9e7b6f041971e5b6b5c6d2d6b44a25cff1309cb6b6799f917d6d1ba02f250ebeede75bf322002ebea0a3c36a4b202e475eff3e6ab2dfebc59f102b19c7eadc6946dc4ee59dab90566394eb5fe1000d79d9de3928b613506658f9375ac9e74622ada8b5bd259541ead697eb25fb5c7b542307bb21d1dde7daf1daf60f23c19b14948938b05b098f0a9a8f8d079fc358c1fe9be125fc37fcd04ecc59941d024f9437b802d192a15c6249b9366dcd3d83dc4bb642b5ef136655a1a4757f7e924a77ac48faa4d5362584436caee825e4248a0eef5473de02f60d555b20d6b6e348059cadfa50cd3be5ab70d4835a15b32415455f9d843e3810f10568e17ba35bbb7946070aad889c0139bd97e77bca74a63258982d40e4a75c6df1a4ca150cafaf56fcd3952f64aaf32fd13de33e6866e8e8316af5fe83c493c1a0f49c4123ffd852cc0020d3bf54241a450c9229bcba6b66cdadefd7e89d0e4f3b45ceead84afa28f945e30a15215eb18318490803a95a079c8030217b898527f78e8c68aecae5adaa2acfa5b214061133a3ed97a06b4bed05b870cdc304432caacb7128dd1dae51d2fc1674d5fb1da6f54824f405089719bc0b298ab05e7e74127b19807029f4135781cc1b001f20e7e106aa96ce6872c7e01370d7ace5b7976a6b7a4ba9c8606fa76be36176bc29ee0bd350fbdfe45be4ca4aac428e6bebe51c659e6602e32bedbf00723b7c8e8a7da01e13fa8cdf11221e24e4e6e01382cc57f7e4ddb3a83d2b79eaa63a2aca51da4d982c671d70c9451ad7521d34ea9a7ea232377f3cd2de67989dcf5997ae043bde8d19ff8456804a6b38c37b44a9bc47e5110f40cc697709d23cb1f959ce43b4160e1c7334fe0afb5995fc9973b4b2dc2eaec8783d126847fee87362219a3825dbcae8c798cd02449ce8857275ade995216ebdb5827cd492b9549e0e69635aa6c1862b5228ea9788300c14cc98366176a02c92fedb4b2b44c271b84f100249551bfd9114ecfb7e172b02a39de8e7fa22c2d715de68697d075128c3dbe12bf05226e7630a1ef29a5efb9881efa9739c68aa65777dfe1f7893accd2c4ef3eade359e42c36b9396bf67a3f1b6514ed2d43c22159d928cc746bd7b18c9ca1d1597d63906e00ab1d8224c0ace6e843d20c7b7256e7ed35a658665e305282f592a961b43259c4d3250e823c73611fd81a8af1994bff8cd5b4fdfc64165e65c1745e369dfdc9cc9c5729bdf91ff8d96a0a62c4568e0231922d45507cefeb5614476d4940a11ed20ef260a99a2e4e70726c56be92a681c1cb7611fde44cdbc44c699c83ea1c3987a6fedd39240a93c76ab77b285ec8070f3ad130380ce131639ede6f7e48ef934a6983552c7d5029333c8952a40d398663fefd2992831eaa865b1ef093dc6b06eb649a44682bfc1e696e024489b1d98004027cd546d4b020d67dac72a81a0df697c769539349ec657dcad625ef0a0b7d3438587aa06e9600cb6707fcab542ccac6bfaff8f36d0fbe066afd4bd0231b35289d32237c9a7fe3fe530570ed39a866a4eb7a64a40a09f57a69b350fa270e18baf305e4ea72439718e7c1c264f27b8aa859c6c61fdeb264cd67faa123b61b4ba4062029e15ca3839a851027079ed95474099fc196fdf210bfa4bdef576d641911a03cd9da327724e7eb53af13a663467907347ab8b171848f0ee72d1bd5fb11454d3e6e7b5def2a28644ef2bc89408f3b5f1a80e6d16cabc99eea0b31693577171b8f07d41a05864c4ce00caf60bcc6fff0cf2173600b76d1e139b843a9c8465e1331e470fe75dd0500a3adb0a2138fa392abf4584796fce95ae3c3ddabe43ce34c7a1e9fba6471567eee6c76aee31ccb03f03aed5199cfdf5ae7a928d8c68ab04c577f6d05fa4c7d1829036d3e9a4cd718c7d71236239ddd968dccfb93901f4586e3039f70ddcde4b81696aadf5445d2f35efb5e298da8ab05140585864c54b374ce329dd16a4e069ec07705b4241cf7c28944ea8d428cc76d928b9a5d86c6891a610520c7507405514e1ea48ac629ec37afbe154d9496fc027544495fa6ef1b2e0530dfce0fd745046c1ecb189ec7ad9c77fb679b56c89433c713494a8b712268a46afdd6bdc3c0100b344cd2870886097c39a2036875f8b8a39e9e56e27d927502cc06bf3ccfc33b7dbda35fe24fed5df16a087a913c47bc7bcc0b78aa23c974c2e4013978fa9bc8c9620ccc3e2ea666a1a69bf0e498aee0d09279b034471ac82d82bd0cfc202bfe4b7a8693dfb1ee4b91c0ab6a2463ba7f5db3b547bf9e4e53ed0dacc356f91b890835e6088928e6afd9774c8bd65a97bbde05a1b55c887d2b6dff6af52a5910b302bf59b1501214626dc19fac9070b904e9909a21e94cba29e605df6a7041e0cddd7fc442c32ab2037f051029bccbdeb9a24846b3a3801cf11b993058e4ac7dbec5da37c4e94e49e2f4240e9133dc3e3fa690d5e66343cecdc658570b1ef14ea45aceb2239fff7ac12a3b68f0e67c687dff63a1b0eb98a8c2e3566c192750604c68b645029c5c85c6f0ba7d7843cbdeaa6998929e71289d2bcb6cc8f8a4b9a196af38554b08e582e3f5a9b66ee5429886d4fbcb4144564a366e75c0a07631e58eed80f236763337e9eaa0e3c982cd0164b68e234fda3dc51f3002be20472a645e2c0e56c8d66230fa48455543c04053fe4de6e0ca456d7560cd7931b1fd2cd8852754b484d2288c6e665b5103c509b4f75d2a981f3c015f6ce2dbc799f90d89e30756cf356dc0658101f93b02084ed76d99d813556209b196061e76edf7a184f4504d279af876737aec7ac2be0190b291c34a6083199cc3171491f679e03a7affb6ab44f9035a065712b1e69a97e55ee130f52c38e92819dcc64a03b965ecceb69ca4ed68d9d7cf5880f8a400af2452d691b115ebf1b78a8af6cf898c4f89cf4bc934b130661ec5152733071ec139ec68aaf983e1bd2a4e274ef37f7331a552a3ba20ce5249ca5fc670117829166fea882d8cd6d4b308a939b6f1601f9945097f2259ee069ec79bb68a387c505d8ee7df2b388600ec9fd7f3de497fce3d5b091c6159b31ff9ebd41607696a1649ab0ca917a104e9ccecf1b9f124674d24f008ff71e3be77d12a4cf12c8d45ecfdb38de697bc9d8fd3bb14528fadbc92fb23d8e0a27fe19d7e49b98b0d53aa4c478e5c62faf102832275a1e17a566fed181144b5511dfcb1952eff30d8b43e86ea9a3e649051cd2d46bd83ec5df11b57db77b23b61f438f0639c2b98e1d674bf8443a670fee25790e8f6c9ebf1b15089ad2de217b1c875ff3a3a9a7eaf0561bc698ec876db9e1b147434ec8b6d7f3f250f10dd47365c1c22e038ec7862b7e366ef992352065cd1baebf28c431ddc2aa07977bb523e728e733138ce9af43369a4ea78f07217b4f85f2f3cf367225231210afe25971780848fe66e83cc9c94b86510d5e2dd182d9bf7754422438cc70ae0472e39f92a0ad77b1d04d6db5ad4edea1a2655be8e953298b596497cf3ebad8d166112baf5ed8574f104b55c98e4f17cd34e2226c6824a260bf3aa86053f05a778201484b7ae76d4acaee4073ccb5a34f7cc08a1dfe93c38b2f59ae10ba04e3793737e46ba5f863aeeab3e85e599f323a6b3e44b14744a9bf9143232b757c36b610937f6bd257d4f075b71b565b470521a60bfa662124c8f9bfd51af10a57e42f7e38d7f2220981e6e7a8cfe3d541ad60b6ef10d3d6295064afa14b2c365704853be4fc0f6f4c4ab91bb4a0d3bc1dddac4cb4e4c03535e802bbbc3c56a7dc0b92dbac3baa6c8e45e7ef4511b9a2a71f25af766cf909a6242ba3495d1bf1c07e90b63799dfde680e4c1d50a925405f0205031b6678601df8b83c73e8ccdbaf3873024a577187d9cd160504cd3b5703c0a1bfe413df27bee7113c8f794a617b22fd8dc6b837f79a14412df0ab1ef6f554e5285ca2b25bc9742c19d68d52ba4187f25ffcc7a849e600e63ffe6c76f518c4beb215a150358ee59f602fecd32a22cee477f9486cbf512c9e4b3a0408661a40bfabd6b31e7c0a99fc5a83deb0cd4a188635e1510c35ec4e2bd9b2e2a634e2b68dc36471dd1ef4ededbf266e9ef59abf64ebdaa52027552f8a37693f6893825f48bf92e4da24e85ada15ba63cbf8c4b8b08a7e3ff15795398bbc53972cacc3a2947f6309f59c1dd58936a7fbf9ada508102373e9c2cadbc427aa6adf889a282f7832eb580facfa06cd74e18286f7fa56a980c84f5da147410c4516132c0365ede002196bd2b11ddcb0d54b76f26e6914608419558be770bd4e0979594285e7dc304bbb984b11a70178835229679f9509d7d8c7ff536fd37b5469779c2a9198e33a57abd5b0fb73716a4ac7cd9b21cdea3adfddb4f0389cde05dab5e96b2241fff3d69a55a09161c1dbd8e39a57f8b081c2c0e4223df5d95554ea9b079b7670998556cfff5fa009777d7577d3acab286bfdc5a7d027d57293c8a1a774c83e27d52a93309bec74d104c0dd5a94a4e4da486fe", 0x2000, &(0x7f0000003000)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x21, 0x8001, 0x80200, 0x5, 0x4, 0x8, 0x2}}, &(0x7f0000000500)={0x18, 0x0, 0x10001, {0x2}}, &(0x7f0000000600)={0x18, 0x0, 0x3}, &(0x7f0000000640)={0x18, 0x8000000000000025, 0xff, {0x84}}, &(0x7f0000000680)={0x18, 0x0, 0xf4, {0x2}}, &(0x7f00000006c0)={0x28, 0xfffffffffffffffe, 0x200, {{0x401, 0x0, 0x1, 0xffffffffffffffff}}}, &(0x7f0000000700)={0x60, 0x0, 0x2, {{0x800, 0x1, 0x6, 0x40, 0x5, 0x9, 0x7, 0x5}}}, &(0x7f0000000780)={0x18, 0x0, 0xfffffffffffffff7, {0x3ff}}, &(0x7f00000007c0)={0x1d, 0x0, 0x9f9, {'rdma.current\x00'}}, &(0x7f0000000800)={0x20, 0x0, 0x5, {0x0, 0x2}}, &(0x7f0000000880)={0x78, 0xfffffffffffffffe, 0x0, {0x80, 0x9, 0x0, {0x0, 0x40, 0x0, 0x8001, 0x401, 0xd2a9, 0x3194, 0xff, 0x8f22, 0xc000, 0x9, r1, 0x0, 0x1000, 0x4}}}, &(0x7f0000000980)={0x90, 0xfffffffffffffffe, 0x4, {0x1, 0x2, 0x3, 0x5, 0xe344, 0x3, {0x5, 0x5, 0x8, 0x7, 0xa0, 0xa1, 0x1, 0x7, 0x7f, 0x0, 0xe00000, 0x0, 0x0, 0x7fff, 0x5}}}, &(0x7f0000000a40)={0x58, 0x0, 0x5, [{0x4, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x0, 0x21}, {0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000002cc0)={0x330, 0x0, 0x0, [{{0x6, 0x1, 0x3b, 0x2, 0x8, 0xfffffffe, {0x4, 0x5, 0x7, 0x8, 0x4, 0xf, 0x3ff, 0x0, 0xbe, 0x2000, 0x40, 0x0, 0x0, 0x1, 0x4}}, {0x2, 0x3, 0x8, 0x9c6d, 'cgroup2\x00'}}, {{0x3, 0x3, 0x3, 0xc9, 0x2d6, 0x6, {0x1, 0x4a32, 0x9, 0x401, 0x1, 0x44, 0x8, 0x401, 0x8, 0x1000, 0xffff00, 0x0, 0xee01, 0x31fdbc76, 0x2}}, {0x3, 0x67, 0xf, 0x7f, 'permit_directio'}}, {{0x6, 0x0, 0x8, 0x126f, 0x5, 0x5, {0x0, 0x5, 0x200, 0x0, 0x6, 0x575d, 0x1, 0xff, 0x4, 0xc000, 0x1, r2, 0xffffffffffffffff, 0x2, 0x10000}}, {0x5, 0xffffffff00000000, 0x5, 0xe52, '%#+:\''}}, {{0x5, 0x3, 0x800, 0x4, 0x2, 0x8000, {0x1, 0x0, 0xd6ee, 0x1, 0x1, 0x96, 0x5, 0x1ff, 0x3, 0xa000, 0x8, r1, r4, 0xffff}}, {0x0, 0x4, 0x7, 0x2, 'fsmagic'}}, {{0x3, 0x0, 0x401, 0x4, 0x8000, 0x7, {0x1, 0x5, 0x1, 0x7f, 0x8, 0x100000001, 0x2, 0x5, 0x4, 0x4000, 0x7, r1, 0xffffffffffffffff, 0x70adcaa2, 0x401}}, {0x1, 0x3, 0x0, 0x5}}]}, &(0x7f0000000b40)={0xa0, 0x0, 0x1, {{0x2, 0x0, 0x40, 0xb9f5, 0xfffff8f4, 0x3, {0x2, 0x1, 0x7fffffff, 0x1, 0xa1, 0x5, 0x8001, 0x1, 0x7f0, 0x1000, 0x15c0, 0xee00, r5, 0x80000001}}, {0x0, 0x903fab1b08a79f8f}}}, &(0x7f0000000c00)={0x20, 0xfffffffffffffffe, 0x1f000000, {0x6f2, 0x4, 0x0, 0x9418}}})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
open(&(0x7f0000000200)='./file1\x00', 0x440102, 0xed)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000400)={[{@balloc_noborder='block-allocator=noborder'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065729bb5367f6469723d2e65302c6c6f77657264697287e96647fe1763e92c776f726b6469723d2e2f66696c65315c00"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  579.847857][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  579.860736][T10656] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  579.906669][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  579.916780][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  579.948202][T10660] loop3: detected capacity change from 0 to 4
06:33:41 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.015010][T10666] overlayfs: unrecognized mount option "upper›µ6dir=.e0" or missing value
[  580.038132][T10666] overlayfs: unrecognized mount option "upper›µ6dir=.e0" or missing value
[  580.055933][T10660] loop3: detected capacity change from 0 to 4
06:33:41 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff030000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.098549][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
06:33:41 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfa7c2cc0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.149983][T10650] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[  580.177066][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  580.209273][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  580.212269][T10691] overlayfs: failed to resolve './file1': -2
[  580.228081][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  580.249672][T10693] loop3: detected capacity change from 0 to 4
06:33:41 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0)
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.257827][T10691] overlayfs: failed to resolve './file1': -2
[  580.265676][T10693] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  580.276677][T10696] loop2: detected capacity change from 0 to 4
[  580.292565][T10696] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  580.360062][T10693] loop3: detected capacity change from 0 to 4
[  580.364322][T10706] overlayfs: failed to resolve './file1': -2
[  580.372308][T10696] loop2: detected capacity change from 0 to 4
06:33:41 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800002, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.460359][T10707] loop3: detected capacity change from 0 to 4
06:33:41 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:41 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xff0f0000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  580.566243][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  580.620815][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  580.628376][T10730] loop2: detected capacity change from 0 to 4
[  580.635248][T10730] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  580.645286][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  580.670045][T10735] overlayfs: failed to resolve './file1': -2
[  580.686250][T10736] loop3: detected capacity change from 0 to 4
[  580.697559][T10730] loop2: detected capacity change from 0 to 4
[  580.700673][T10736] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
06:33:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

[  580.716958][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  580.731959][T10742] overlayfs: failed to resolve './file1': -2
[  580.793734][T10687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  580.810857][T10736] loop3: detected capacity change from 0 to 4
[  580.827742][T10687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  580.841002][T10687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  580.849568][T10730] overlayfs: conflicting lowerdir path
[  580.892579][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  580.908159][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  580.939802][T10736] loop3: detected capacity change from 0 to 4
[  580.969463][T10694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  581.005455][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  581.017962][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  581.026250][T10677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100004400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

06:33:42 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00', 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x800, 0xf7, 0x8a0]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x8)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f77657264697201afe073428c14bb3d2e2f66696c65302c776f726b6469723d2e2f66696c65315c013ed1f4ef474df91e866181aa0d7e8b04ba626404afe948f40337eed75f992f9e3d63fc260411729e551bd8060ee79c9c8b1283d20035bc6d62e70265d6cfd8acad0aceb9e28fa72838c87d210b726b47673578d179954704d926958539d8ecd964521beaf812d46dd95fb1ea9a4748c828e76c3deb004f62cf29a99eb1047249d1c18f2d07599743c4b679ea97de854e8fcb7bd9da5615b3c9684215b8fd37658e12ad336625c3fb03c31434ef578f"])
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file2\x00', &(0x7f0000000280)='overlay\x00', 0x200000, &(0x7f0000000400)={[{@nfs_export_on='nfs_export=on'}], [{@fsmagic={'fsmagic', 0x3d, 0x4485}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{(!%{['}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x39, 0x30, 0x63, 0x31, 0x39, 0x38], 0x2d, [0x37, 0x37, 0x36, 0x33], 0x2d, [0x35, 0x36, 0x63, 0x36], 0x2d, [0x66, 0x39, 0x63, 0x65], 0x2d, [0x0, 0x64, 0x61, 0x63, 0x34, 0x64, 0x30, 0x31]}}}, {@smackfshat={'smackfshat'}}]})

06:33:42 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffff1f00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:42 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800002, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

06:33:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:42 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x51d}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

[  581.350851][T10787] loop2: detected capacity change from 0 to 4
[  581.352207][T10792] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  581.358027][T10787] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  581.386368][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  581.394118][T10788] loop3: detected capacity change from 0 to 4
[  581.405970][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  581.414551][T10788] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  581.424152][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  581.439768][T10804] overlayfs: unrecognized mount option "lowerdir
¯àsBŒ»=./file0" or missing value
[  581.501677][T10787] loop2: detected capacity change from 0 to 4
[  581.527754][T10788] loop3: detected capacity change from 0 to 4
06:33:42 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  581.653347][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  581.682231][T10808] loop3: detected capacity change from 0 to 4
06:33:42 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffdf9, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  581.711153][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  581.724069][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:42 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:42 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029005b05d25a80648c63940d0424fc60100005400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  581.856801][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  581.867219][T10833] loop2: detected capacity change from 0 to 4
[  581.902867][T10832] overlayfs: unrecognized mount option "lowerdir
¯àsBŒ»=./file0" or missing value
[  581.913749][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  581.921651][T10789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:43 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  581.945628][T10845] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  581.953951][T10840] loop3: detected capacity change from 0 to 4
[  581.981642][T10840] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  581.985482][T10833] overlayfs: conflicting lowerdir path
[  582.079959][T10855] loop2: detected capacity change from 0 to 4
[  582.091798][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  582.100986][T10840] loop3: detected capacity change from 0 to 4
[  582.111367][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
06:33:43 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff7f, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  582.124971][T10855] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000)
[  582.145233][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
06:33:43 executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4000800)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mkdir(&(0x7f0000000200)='./file1/file0\x00', 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  582.180023][T10867] loop2: detected capacity change from 0 to 4
[  582.211091][T10873] loop3: detected capacity change from 0 to 4
[  582.218349][T10873] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=00000000)
[  582.262916][T10873] loop3: detected capacity change from 0 to 4
06:33:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r3}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r0, &(0x7f0000000140)={[0x4]}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0xd}]}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x3800, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x700}, 0x0)

06:33:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6000000}, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010d0049bca37541bdda3b1340246539ac27f1452f2dbbcca1116055d57cef02ce0a5b7dd4d05f606ec19c4868d15ba47a8fc5851e4996a064acd49b5673c46c9283b3ea0f4b32fb06acf4fc997657f", @ANYRES32=r3, @ANYBLOB="00000000e60000002100f0ff0b00626f6e640000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001100270d00"/20, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x4f, 0x2, 0x0, 0x0, 0x1, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

06:33:43 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr', 0x3d, 0x30}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio='permit_directio'}, {@appraise='appraise'}, {@pcr={'pcr'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file1\x00', 0x800, 0x0, &(0x7f0000000ac0), 0xb010, &(0x7f0000000880)={[{@barrier_none='barrier=none'}], [{@obj_user={'obj_user', 0x3d, 'subj_type'}}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef={'smackfsdef'}}, {@subj_type={'subj_type', 0x3d, '^&'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\!#\xcc-'}}, {@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000600)='./file1\x00', 0x2000, 0x103)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffdf9, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
rmdir(&(0x7f0000000140)='./file1/file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)

[  582.390518][T10881] overlayfs: failed to resolve './file1': -2
[  582.417248][T10873] loop3: detected capacity change from 0 to 4
[  582.421422][T10845] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
06:33:43 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x10, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="3e4dc5f79b8c19c5c11d747a1c87d365be20fd862c1a594e0072a1617559c27fc58d9da1832e528628a24ecfe6b5cc7df59b3aef469121bac9a506dc6ca3856769fe6a398d591f2029de85b6b71cff300b2425529aca5f131669b3c20dcb65241cfd9eb81def4c04c309699e1a433929ed67d3563989b089f80840cc686d3c74d44c7186189ae14b84d392d2d99fcc0f5ff8581884711090f923eba8dffd557a82215c4c2d92e0b31292db7e71120581934722e885dd6d54a4f938e20e5be0f6d4f26f8b48941483c08eaf000112586c99881e5f587217e7ea2e791a7fc19cd7f3", 0xe1, 0x401}, {&(0x7f0000000240), 0x0, 0x7}], 0x0, &(0x7f0000000640)={[{'/dev/loop-control\x00'}, {'/dev/loop-control\x00'}, {'/d\xad\xb0\xccs\xdeR:\xcbev\xc9\t\x00\x00\x00\x00n(\x8f\xe2\x8a\xa3\x0e\xf3\xe8\xfe\xa0\x97)K\xaf\xa5\x04\xaf\xb7\x1dL\xf0\xa5\xa2\xe4\x11\rEWI\x92\xc5]\x98\x8b\xc1\r\xe4\x80V\t\xb4\x9f\xc0>]\xecP\x01\xeb\xc1eO\xd3/\x8d\xf8\xda\x89\xcb\x04'}], [{@pcr={'pcr'