utor.4" name="/root/syzkaller-testdir2021117859/syzkaller.ghg67L/17/bus" dev="sda1" ino=1180 res=1 errno=0 [ 345.724385][ T5763] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:27 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x800) (async) 17:10:27 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) open(&(0x7f00000003c0)='./bus\x00', 0x40540, 0x0) (async) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) (async) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x8) (async) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0x408, 0x3) (async, rerun: 32) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x1, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3900}, 0x0, r7}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xff, 0x47, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7800, 0x10000, 0x5}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250c0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3100000000000000001400020076657468305f746f5f7465616d000000080003000400000008000100", @ANYRES32=r7, @ANYBLOB="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"/556, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000300040000001400020077673200"/36], 0x2b4}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) (async, rerun: 32) fallocate(r0, 0x11, 0x0, 0x280404) (async, rerun: 32) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x41, 0x1400, 0x408, 0x3) [ 345.731966][ T5765] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 345.775307][ T27] audit: type=1804 audit(1672333827.185:29): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2021117859/syzkaller.ghg67L/17/bus" dev="sda1" ino=1180 res=1 errno=0 [ 345.815388][ T5775] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 345.837074][ T27] audit: type=1804 audit(1672333827.185:30): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2021117859/syzkaller.ghg67L/17/bus" dev="sda1" ino=1180 res=1 errno=0 [ 346.025237][ T27] audit: type=1804 audit(1672333827.185:31): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2021117859/syzkaller.ghg67L/17/bus" dev="sda1" ino=1180 res=1 errno=0 17:10:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 346.370698][ T27] audit: type=1804 audit(1672333827.425:32): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2021117859/syzkaller.ghg67L/18/bus" dev="sda1" ino=1186 res=1 errno=0 17:10:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 346.568192][ T5792] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 346.615189][ T5793] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 346.669132][ T5797] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 346.752662][ T5796] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 346.872459][ T5802] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 347.033938][ T5805] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:29 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000851) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r1, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@caif=@util={0x25, "8e9e2862d840453aeff0beff99e0e0d3"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a3", 0x1}, {&(0x7f0000000100)="5b87e2f3ac1aecf559ed83a96d792b09f89de7661f33ffc3762b81ce4f5235ee505b8a45de84611578b107d6e3dc90031f54e3afaca75706a87e8da0ac727648de9f76719847b23dd03c2343f88fdabdae05a9ae9419fb898a72c975a7d836b3d47a223aa393c1bd3c7b21013090c3790852f068d5909ed922cb718626a628a744adc9f816d964ec7332d6c7ae20a5f7dfa9152873c659c7578d1a9470cfb7d3fd55c1e76e3c883d5b599d832b1fe0e5c880f3e226ee1a43d859ccf0658a779ab994dee1b3ed04452fdec27f3f354f3cdc64fab08a5fa2ae42e2fcf808219e3da91668", 0xe3}, {&(0x7f0000000200)}, {&(0x7f0000000240)="420ea77fcb905807b3", 0x9}], 0x4, &(0x7f00000002c0)=[{0x88, 0x107, 0x8, "e1011bc6ae4f466a33c6780d470bc400f969303d64c0ea91d2366e16693f16c4e7fdc4b62f2c9de706c7bf8a486fdb63c3342ea4bc36c44efe59b24abacc224945b3c77b2cf5d89e8af324619bc7d3797a1b57197030277a86fbd807440364957c04e161b72a608e0d167fcd61391af9aa80142f"}, {0x18, 0x0, 0xa31, "fad7cd578b"}, {0x40, 0x104, 0xff, "57c05b55ecfacde2d7f090fedbb8e0d18d99160467fb039ff0d108213c94e4bd89158237d09a60bd69e7fc80bb4cfc"}, {0xc8, 0x3a, 0x7, "b051b5a6c39db6fcfab877eda2928768591df5ef0850d8a9297f4e59ed7543facbdca53fdd7ffcef6bc7adc83b6d77ac5cc98a41f12554344210805002d4a54c8594991cdd61e68170aad74db39897f8c1161ea0eaa969df6aabddd742ec26e628229ed79a8bd8a07199575cd9530d1293ceeda6a9e00485397283cf53ed26bc8b8b0007113a03b3605c0dc85be7bb472504360eb6d502fd4ac58a1c1cd4747f8275bd2e6d8d19ec4780eb29230538974d"}, {0xc0, 0x10d, 0xfe8, "6e63b174b51d715add8679ffe2548c4f07c7b2983a97b1e5a6c959a3072acb0a051be920d89866e57a3c2d3000f18576696678e158f0695ee0c4b816f98dd7dcdf6a178d4434554e396aba807969744c1b38d7f7de4e074a7ff51191dbd916c45e2f073e9be6e8f9edd19d46a72145035e8e3bab5d12dad5bed7da03360596c6152f88e96a26b9a6481769fe9a93da2d723dea1f10b797f6c4632398dc92e2775978004b6dddc70d63"}], 0x268}, 0x4008000) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x840) 17:10:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xfffffffffffffec2, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/psched\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="d36d8a4d124a1faaad7613e236ffffffffff000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000024c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) ftruncate(r5, 0x0) lseek(r4, 0x20400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) 17:10:29 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000091d000/0x3000)=nil) madvise(&(0x7f000091a000/0x3000)=nil, 0x3000, 0x14) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 347.736098][ T5812] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:29 executing program 1: r0 = syz_clone(0x68001000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1640cc23df213672019006e2e9cc73a4c2b1a6effc608cbf69ef49c914629d8e9c") wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) tkill(r1, 0x1d) 17:10:29 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) (async) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000091d000/0x3000)=nil) (async) madvise(&(0x7f000091a000/0x3000)=nil, 0x3000, 0x14) (async, rerun: 32) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (rerun: 32) [ 347.911247][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 347.911261][ T27] audit: type=1804 audit(1672333829.395:36): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2642619255/syzkaller.BDyqFH/21/bus" dev="sda1" ino=1157 res=1 errno=0 17:10:30 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000851) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r1, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@caif=@util={0x25, "8e9e2862d840453aeff0beff99e0e0d3"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a3", 0x1}, {&(0x7f0000000100)="5b87e2f3ac1aecf559ed83a96d792b09f89de7661f33ffc3762b81ce4f5235ee505b8a45de84611578b107d6e3dc90031f54e3afaca75706a87e8da0ac727648de9f76719847b23dd03c2343f88fdabdae05a9ae9419fb898a72c975a7d836b3d47a223aa393c1bd3c7b21013090c3790852f068d5909ed922cb718626a628a744adc9f816d964ec7332d6c7ae20a5f7dfa9152873c659c7578d1a9470cfb7d3fd55c1e76e3c883d5b599d832b1fe0e5c880f3e226ee1a43d859ccf0658a779ab994dee1b3ed04452fdec27f3f354f3cdc64fab08a5fa2ae42e2fcf808219e3da91668", 0xe3}, {&(0x7f0000000200)}, {&(0x7f0000000240)="420ea77fcb905807b3", 0x9}], 0x4, &(0x7f00000002c0)=[{0x88, 0x107, 0x8, "e1011bc6ae4f466a33c6780d470bc400f969303d64c0ea91d2366e16693f16c4e7fdc4b62f2c9de706c7bf8a486fdb63c3342ea4bc36c44efe59b24abacc224945b3c77b2cf5d89e8af324619bc7d3797a1b57197030277a86fbd807440364957c04e161b72a608e0d167fcd61391af9aa80142f"}, {0x18, 0x0, 0xa31, "fad7cd578b"}, {0x40, 0x104, 0xff, "57c05b55ecfacde2d7f090fedbb8e0d18d99160467fb039ff0d108213c94e4bd89158237d09a60bd69e7fc80bb4cfc"}, {0xc8, 0x3a, 0x7, "b051b5a6c39db6fcfab877eda2928768591df5ef0850d8a9297f4e59ed7543facbdca53fdd7ffcef6bc7adc83b6d77ac5cc98a41f12554344210805002d4a54c8594991cdd61e68170aad74db39897f8c1161ea0eaa969df6aabddd742ec26e628229ed79a8bd8a07199575cd9530d1293ceeda6a9e00485397283cf53ed26bc8b8b0007113a03b3605c0dc85be7bb472504360eb6d502fd4ac58a1c1cd4747f8275bd2e6d8d19ec4780eb29230538974d"}, {0xc0, 0x10d, 0xfe8, "6e63b174b51d715add8679ffe2548c4f07c7b2983a97b1e5a6c959a3072acb0a051be920d89866e57a3c2d3000f18576696678e158f0695ee0c4b816f98dd7dcdf6a178d4434554e396aba807969744c1b38d7f7de4e074a7ff51191dbd916c45e2f073e9be6e8f9edd19d46a72145035e8e3bab5d12dad5bed7da03360596c6152f88e96a26b9a6481769fe9a93da2d723dea1f10b797f6c4632398dc92e2775978004b6dddc70d63"}], 0x268}, 0x4008000) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x840) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000851) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') (async) lseek(r1, 0x4, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@caif=@util={0x25, "8e9e2862d840453aeff0beff99e0e0d3"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a3", 0x1}, {&(0x7f0000000100)="5b87e2f3ac1aecf559ed83a96d792b09f89de7661f33ffc3762b81ce4f5235ee505b8a45de84611578b107d6e3dc90031f54e3afaca75706a87e8da0ac727648de9f76719847b23dd03c2343f88fdabdae05a9ae9419fb898a72c975a7d836b3d47a223aa393c1bd3c7b21013090c3790852f068d5909ed922cb718626a628a744adc9f816d964ec7332d6c7ae20a5f7dfa9152873c659c7578d1a9470cfb7d3fd55c1e76e3c883d5b599d832b1fe0e5c880f3e226ee1a43d859ccf0658a779ab994dee1b3ed04452fdec27f3f354f3cdc64fab08a5fa2ae42e2fcf808219e3da91668", 0xe3}, {&(0x7f0000000200)}, {&(0x7f0000000240)="420ea77fcb905807b3", 0x9}], 0x4, &(0x7f00000002c0)=[{0x88, 0x107, 0x8, "e1011bc6ae4f466a33c6780d470bc400f969303d64c0ea91d2366e16693f16c4e7fdc4b62f2c9de706c7bf8a486fdb63c3342ea4bc36c44efe59b24abacc224945b3c77b2cf5d89e8af324619bc7d3797a1b57197030277a86fbd807440364957c04e161b72a608e0d167fcd61391af9aa80142f"}, {0x18, 0x0, 0xa31, "fad7cd578b"}, {0x40, 0x104, 0xff, "57c05b55ecfacde2d7f090fedbb8e0d18d99160467fb039ff0d108213c94e4bd89158237d09a60bd69e7fc80bb4cfc"}, {0xc8, 0x3a, 0x7, "b051b5a6c39db6fcfab877eda2928768591df5ef0850d8a9297f4e59ed7543facbdca53fdd7ffcef6bc7adc83b6d77ac5cc98a41f12554344210805002d4a54c8594991cdd61e68170aad74db39897f8c1161ea0eaa969df6aabddd742ec26e628229ed79a8bd8a07199575cd9530d1293ceeda6a9e00485397283cf53ed26bc8b8b0007113a03b3605c0dc85be7bb472504360eb6d502fd4ac58a1c1cd4747f8275bd2e6d8d19ec4780eb29230538974d"}, {0xc0, 0x10d, 0xfe8, "6e63b174b51d715add8679ffe2548c4f07c7b2983a97b1e5a6c959a3072acb0a051be920d89866e57a3c2d3000f18576696678e158f0695ee0c4b816f98dd7dcdf6a178d4434554e396aba807969744c1b38d7f7de4e074a7ff51191dbd916c45e2f073e9be6e8f9edd19d46a72145035e8e3bab5d12dad5bed7da03360596c6152f88e96a26b9a6481769fe9a93da2d723dea1f10b797f6c4632398dc92e2775978004b6dddc70d63"}], 0x268}, 0x4008000) (async) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x840) (async) 17:10:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0xfffffffffffffec2, &(0x7f0000000180)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/psched\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) syz_clone3(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="d36d8a4d124a1faaad7613e236ffffffffff000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000024c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) (async, rerun: 64) ftruncate(r5, 0x0) (async, rerun: 64) lseek(r4, 0x20400, 0x0) (async, rerun: 64) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (rerun: 64) sendfile(r4, r6, 0x0, 0x80001d00c0d0) 17:10:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:30 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) (async, rerun: 32) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000091d000/0x3000)=nil) (async) madvise(&(0x7f000091a000/0x3000)=nil, 0x3000, 0x14) (async, rerun: 64) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (rerun: 64) 17:10:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xfffffffffffffec2, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/psched\x00') (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) syz_clone3(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="d36d8a4d124a1faaad7613e236ffffffffff000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000024c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) (async) ftruncate(r5, 0x0) (async) lseek(r4, 0x20400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) 17:10:30 executing program 1: r0 = syz_clone(0x68001000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1640cc23df213672019006e2e9cc73a4c2b1a6effc608cbf69ef49c914629d8e9c") wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) tkill(r1, 0x1d) [ 349.011112][ T5844] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 349.081182][ T5852] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xfffffffffffffec2, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/psched\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="d36d8a4d124a1faaad7613e236ffffffffff000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000024c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) ftruncate(r5, 0x0) lseek(r4, 0x20400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) [ 349.606494][ T5865] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:10:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 350.740944][ T27] audit: type=1804 audit(1672333831.525:37): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2642619255/syzkaller.BDyqFH/24/bus" dev="sda1" ino=1156 res=1 errno=0 [ 350.793833][ T5869] fuse: Bad value for 'fd' 17:10:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:10:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 350.920891][ T5874] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 351.020717][ T5876] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 351.069269][ T5879] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 378.381944][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.388287][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 17:11:25 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000851) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r1, 0x4, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@caif=@util={0x25, "8e9e2862d840453aeff0beff99e0e0d3"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a3", 0x1}, {&(0x7f0000000100)="5b87e2f3ac1aecf559ed83a96d792b09f89de7661f33ffc3762b81ce4f5235ee505b8a45de84611578b107d6e3dc90031f54e3afaca75706a87e8da0ac727648de9f76719847b23dd03c2343f88fdabdae05a9ae9419fb898a72c975a7d836b3d47a223aa393c1bd3c7b21013090c3790852f068d5909ed922cb718626a628a744adc9f816d964ec7332d6c7ae20a5f7dfa9152873c659c7578d1a9470cfb7d3fd55c1e76e3c883d5b599d832b1fe0e5c880f3e226ee1a43d859ccf0658a779ab994dee1b3ed04452fdec27f3f354f3cdc64fab08a5fa2ae42e2fcf808219e3da91668", 0xe3}, {&(0x7f0000000200)}, {&(0x7f0000000240)="420ea77fcb905807b3", 0x9}], 0x4, &(0x7f00000002c0)=[{0x88, 0x107, 0x8, "e1011bc6ae4f466a33c6780d470bc400f969303d64c0ea91d2366e16693f16c4e7fdc4b62f2c9de706c7bf8a486fdb63c3342ea4bc36c44efe59b24abacc224945b3c77b2cf5d89e8af324619bc7d3797a1b57197030277a86fbd807440364957c04e161b72a608e0d167fcd61391af9aa80142f"}, {0x18, 0x0, 0xa31, "fad7cd578b"}, {0x40, 0x104, 0xff, "57c05b55ecfacde2d7f090fedbb8e0d18d99160467fb039ff0d108213c94e4bd89158237d09a60bd69e7fc80bb4cfc"}, {0xc8, 0x3a, 0x7, "b051b5a6c39db6fcfab877eda2928768591df5ef0850d8a9297f4e59ed7543facbdca53fdd7ffcef6bc7adc83b6d77ac5cc98a41f12554344210805002d4a54c8594991cdd61e68170aad74db39897f8c1161ea0eaa969df6aabddd742ec26e628229ed79a8bd8a07199575cd9530d1293ceeda6a9e00485397283cf53ed26bc8b8b0007113a03b3605c0dc85be7bb472504360eb6d502fd4ac58a1c1cd4747f8275bd2e6d8d19ec4780eb29230538974d"}, {0xc0, 0x10d, 0xfe8, "6e63b174b51d715add8679ffe2548c4f07c7b2983a97b1e5a6c959a3072acb0a051be920d89866e57a3c2d3000f18576696678e158f0695ee0c4b816f98dd7dcdf6a178d4434554e396aba807969744c1b38d7f7de4e074a7ff51191dbd916c45e2f073e9be6e8f9edd19d46a72145035e8e3bab5d12dad5bed7da03360596c6152f88e96a26b9a6481769fe9a93da2d723dea1f10b797f6c4632398dc92e2775978004b6dddc70d63"}], 0x268}, 0x4008000) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x840) 17:11:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xfffffffffffffec2, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/psched\x00') sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="d36d8a4d124a1faaad7613e236ffffffffff000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46900) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000024c0)={0x18, 0x0, {0x0, @dev, 'batadv_slave_1\x00'}}, 0x1e) ftruncate(r5, 0x0) lseek(r4, 0x20400, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) 17:11:25 executing program 3: r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x20000851) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r1, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@caif=@util={0x25, "8e9e2862d840453aeff0beff99e0e0d3"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a3", 0x1}, {&(0x7f0000000100)="5b87e2f3ac1aecf559ed83a96d792b09f89de7661f33ffc3762b81ce4f5235ee505b8a45de84611578b107d6e3dc90031f54e3afaca75706a87e8da0ac727648de9f76719847b23dd03c2343f88fdabdae05a9ae9419fb898a72c975a7d836b3d47a223aa393c1bd3c7b21013090c3790852f068d5909ed922cb718626a628a744adc9f816d964ec7332d6c7ae20a5f7dfa9152873c659c7578d1a9470cfb7d3fd55c1e76e3c883d5b599d832b1fe0e5c880f3e226ee1a43d859ccf0658a779ab994dee1b3ed04452fdec27f3f354f3cdc64fab08a5fa2ae42e2fcf808219e3da91668", 0xe3}, {&(0x7f0000000200)}, {&(0x7f0000000240)="420ea77fcb905807b3", 0x9}], 0x4, &(0x7f00000002c0)=[{0x88, 0x107, 0x8, "e1011bc6ae4f466a33c6780d470bc400f969303d64c0ea91d2366e16693f16c4e7fdc4b62f2c9de706c7bf8a486fdb63c3342ea4bc36c44efe59b24abacc224945b3c77b2cf5d89e8af324619bc7d3797a1b57197030277a86fbd807440364957c04e161b72a608e0d167fcd61391af9aa80142f"}, {0x18, 0x0, 0xa31, "fad7cd578b"}, {0x40, 0x104, 0xff, "57c05b55ecfacde2d7f090fedbb8e0d18d99160467fb039ff0d108213c94e4bd89158237d09a60bd69e7fc80bb4cfc"}, {0xc8, 0x3a, 0x7, "b051b5a6c39db6fcfab877eda2928768591df5ef0850d8a9297f4e59ed7543facbdca53fdd7ffcef6bc7adc83b6d77ac5cc98a41f12554344210805002d4a54c8594991cdd61e68170aad74db39897f8c1161ea0eaa969df6aabddd742ec26e628229ed79a8bd8a07199575cd9530d1293ceeda6a9e00485397283cf53ed26bc8b8b0007113a03b3605c0dc85be7bb472504360eb6d502fd4ac58a1c1cd4747f8275bd2e6d8d19ec4780eb29230538974d"}, {0xc0, 0x10d, 0xfe8, "6e63b174b51d715add8679ffe2548c4f07c7b2983a97b1e5a6c959a3072acb0a051be920d89866e57a3c2d3000f18576696678e158f0695ee0c4b816f98dd7dcdf6a178d4434554e396aba807969744c1b38d7f7de4e074a7ff51191dbd916c45e2f073e9be6e8f9edd19d46a72145035e8e3bab5d12dad5bed7da03360596c6152f88e96a26b9a6481769fe9a93da2d723dea1f10b797f6c4632398dc92e2775978004b6dddc70d63"}], 0x268}, 0x4008000) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x840) 17:11:25 executing program 1: r0 = syz_clone(0x68001000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1640cc23df213672019006e2e9cc73a4c2b1a6effc608cbf69ef49c914629d8e9c") wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) tkill(r1, 0x1d) [ 403.933008][ T5892] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 404.821619][ T27] audit: type=1804 audit(1672333885.585:38): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2479041509/syzkaller.VGQxtw/20/bus" dev="sda1" ino=1161 res=1 errno=0 [ 404.885365][ T5897] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:26 executing program 5: fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)={'\x00'}, 0x2, 0x1) syz_io_uring_setup(0x0, &(0x7f0000002740), &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f00000027c0), &(0x7f0000002800)) 17:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140200000000000000000008000100080001"], 0x24}}, 0x8000) 17:11:26 executing program 5: fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)={'\x00'}, 0x2, 0x1) (async) syz_io_uring_setup(0x0, &(0x7f0000002740), &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f00000027c0), &(0x7f0000002800)) 17:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140200000000000000000008000100080001"], 0x24}}, 0x8000) 17:11:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:26 executing program 5: fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000040)={'\x00'}, 0x2, 0x1) (async) syz_io_uring_setup(0x0, &(0x7f0000002740), &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f00000027c0), &(0x7f0000002800)) [ 405.391478][ T5917] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 405.579785][ T5923] fuse: Bad value for 'fd' [ 409.344543][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.355905][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.364528][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.372464][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.381901][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 409.389685][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 409.518958][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 409.567246][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.574431][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.584173][ T5926] device bridge_slave_0 entered promiscuous mode [ 409.592362][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.599811][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.607705][ T5926] device bridge_slave_1 entered promiscuous mode [ 409.633227][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.647278][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.676144][ T5926] team0: Port device team_slave_0 added [ 409.686775][ T5926] team0: Port device team_slave_1 added [ 409.706740][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.713909][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.740097][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.753946][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.761149][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.789395][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.821311][ T5926] device hsr_slave_0 entered promiscuous mode [ 409.828146][ T5926] device hsr_slave_1 entered promiscuous mode [ 409.835099][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.842764][ T5926] Cannot create hsr debugfs directory [ 409.949168][ T5926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.025881][ T5926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.122415][ T5926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.220661][ T5926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.371863][ T5926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.382502][ T5926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.393635][ T5926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.404291][ T5926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.426311][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.433585][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.441699][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.448847][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.494677][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.513498][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.523626][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.531571][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.541007][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 410.555050][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.567072][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.577019][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.586003][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.593161][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.622166][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.630984][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.640007][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.647059][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.655355][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.664602][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.673980][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.683752][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.692730][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.701482][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.712182][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.723691][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.735765][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.744249][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.753841][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.913128][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.920855][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.936614][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.160753][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.169907][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.193605][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.202214][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.211160][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.219862][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.232337][ T5926] device veth0_vlan entered promiscuous mode [ 411.243436][ T5926] device veth1_vlan entered promiscuous mode [ 411.265770][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 411.278725][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 411.287299][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.296430][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.307343][ T5926] device veth0_macvtap entered promiscuous mode [ 411.320251][ T5926] device veth1_macvtap entered promiscuous mode [ 411.336351][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.349134][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.360761][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.372392][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.382514][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.393149][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.403245][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.414220][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.424445][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 411.432106][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.442857][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.453287][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.464777][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.476649][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.485531][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.493949][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.502934][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.511717][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.526180][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.537136][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.547094][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.557618][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.567679][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.582160][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.592352][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.603106][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.613254][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.624012][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.635204][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.646053][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.657156][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.666760][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.675742][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.687532][ T5926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.696842][ T5926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.706625][ T5926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.715596][ T5926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.780573][ T5730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.797589][ T5730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.811220][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.822759][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 17:11:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:33 executing program 3: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0xfff, &(0x7f0000000000)=0x0) io_submit(r3, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000f9f64ed5", @ANYRES32=r1, @ANYBLOB="7f000000000000002e2f66696c653000"]) syz_open_dev$sndmidi(&(0x7f0000000180), 0x4, 0x80) lseek(0xffffffffffffffff, 0x4, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x2000, r4, &(0x7f0000000040)="13bfb873b35caa4c6e7362ae5bfa8a374ef808890cff3552c7e243a9ea884e5e88b1ace9bc919f3700d69fc855ad6ff60ff7e07a9ee2d310199ab56dae90b485c86585cbe716c94709d15ae3bb9e00fa93fb43e7b6c503c8e4e228a68aba40ea8dca9aa952c40d73c8", 0x69, 0x51b, 0x0, 0x3}]) 17:11:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140200000000000000000008000100080001"], 0x24}}, 0x8000) 17:11:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:33 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) 17:11:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 411.833073][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.844100][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:11:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:33 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) (async) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) (async) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async, rerun: 32) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) (async) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async, rerun: 64) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) (async, rerun: 64) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x1, 0x803, 0x0) (async, rerun: 32) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async, rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) (rerun: 64) clock_gettime(0x0, &(0x7f0000000480)) (async) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) (async) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) [ 411.950960][ T5955] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 411.974839][ T5956] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 412.012056][ T5962] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 412.055004][ T5961] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 412.103221][ T5963] fuse: Bad value for 'fd' 17:11:33 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) (async) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) (async) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) (async) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) (async) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) (async, rerun: 64) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) [ 412.145856][ T5962] fuse: Bad value for 'fd' 17:11:34 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) 17:11:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:34 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000300)=""/128, 0x80}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000a278fc007110130000000000950000000030c936081f01010000af1cee52428ae8c28c81156b52d01c741ed230ebc5c3e0bdf817333d77a9c890d29b1d9492f42830d4bdfad139d60a7b519d6d47b0b1a28f8512b5b209fe16f9801d8e26a412491e4db5559d484732668dbe0e070443ca9f92da03707d8ea882de7ef1f464aa778f31"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x80) 17:11:34 executing program 3: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) (async) io_setup(0xfff, &(0x7f0000000000)=0x0) io_submit(r3, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000f9f64ed5", @ANYRES32=r1, @ANYBLOB="7f000000000000002e2f66696c653000"]) syz_open_dev$sndmidi(&(0x7f0000000180), 0x4, 0x80) (async) lseek(0xffffffffffffffff, 0x4, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x2000, r4, &(0x7f0000000040)="13bfb873b35caa4c6e7362ae5bfa8a374ef808890cff3552c7e243a9ea884e5e88b1ace9bc919f3700d69fc855ad6ff60ff7e07a9ee2d310199ab56dae90b485c86585cbe716c94709d15ae3bb9e00fa93fb43e7b6c503c8e4e228a68aba40ea8dca9aa952c40d73c8", 0x69, 0x51b, 0x0, 0x3}]) 17:11:34 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) 17:11:34 executing program 1: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) io_setup(0xfff, &(0x7f0000000000)=0x0) io_submit(r3, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000f9f64ed5", @ANYRES32=r1, @ANYBLOB="7f000000000000002e2f66696c653000"]) syz_open_dev$sndmidi(&(0x7f0000000180), 0x4, 0x80) lseek(0xffffffffffffffff, 0x4, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x2000, r4, &(0x7f0000000040)="13bfb873b35caa4c6e7362ae5bfa8a374ef808890cff3552c7e243a9ea884e5e88b1ace9bc919f3700d69fc855ad6ff60ff7e07a9ee2d310199ab56dae90b485c86585cbe716c94709d15ae3bb9e00fa93fb43e7b6c503c8e4e228a68aba40ea8dca9aa952c40d73c8", 0x69, 0x51b, 0x0, 0x3}]) [ 412.996261][ T5982] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 413.176991][ T5983] fuse: Bad value for 'fd' 17:11:34 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000300)=""/128, 0x80}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000a278fc007110130000000000950000000030c936081f01010000af1cee52428ae8c28c81156b52d01c741ed230ebc5c3e0bdf817333d77a9c890d29b1d9492f42830d4bdfad139d60a7b519d6d47b0b1a28f8512b5b209fe16f9801d8e26a412491e4db5559d484732668dbe0e070443ca9f92da03707d8ea882de7ef1f464aa778f31"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000300)=""/128, 0x80}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000a278fc007110130000000000950000000030c936081f01010000af1cee52428ae8c28c81156b52d01c741ed230ebc5c3e0bdf817333d77a9c890d29b1d9492f42830d4bdfad139d60a7b519d6d47b0b1a28f8512b5b209fe16f9801d8e26a412491e4db5559d484732668dbe0e070443ca9f92da03707d8ea882de7ef1f464aa778f31"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x80) (async) 17:11:34 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ec000000100000000000ffffff000000000000002bfa604966411efbc224a787afebf1590f167890372e9ee283e48ca3595ca66ff7be78b1f86b7a92cce5198774b42a38f9607ec6c87c0d324444b5e4100e0f83954a688dc6c338c82aa39758f8795ca70860d1f405c2a3ba40cd77c0d91250bbd534c63b04614eada41e99ff638f68f14b54454e5e95204dada031f4", @ANYRES32=0x0, @ANYBLOB="4000000002000000bc00128009000100766c616e00000000ac0002807c0003800c00010038000000010000000c000100b637274e800000000c00010068000000000800000c000100030b0000040000000c00010000000000400000000c000100ff010000020000000c000100ff030000020000000c00010006000000070000000c000100ffffffff008000000c0001000800000020000000060001000000000006000500810000000600050088a800000600050088a800000c000200180000001400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x95}, 0x0) 17:11:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:34 executing program 3: io_setup(0x1, &(0x7f0000000100)=0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) (async) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46802) (async, rerun: 64) io_setup(0xfff, &(0x7f0000000000)=0x0) (rerun: 64) io_submit(r3, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000f9f64ed5", @ANYRES32=r1, @ANYBLOB="7f000000000000002e2f66696c653000"]) (async) syz_open_dev$sndmidi(&(0x7f0000000180), 0x4, 0x80) lseek(0xffffffffffffffff, 0x4, 0x0) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x2000, r4, &(0x7f0000000040)="13bfb873b35caa4c6e7362ae5bfa8a374ef808890cff3552c7e243a9ea884e5e88b1ace9bc919f3700d69fc855ad6ff60ff7e07a9ee2d310199ab56dae90b485c86585cbe716c94709d15ae3bb9e00fa93fb43e7b6c503c8e4e228a68aba40ea8dca9aa952c40d73c8", 0x69, 0x51b, 0x0, 0x3}]) 17:11:34 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000300)=""/128, 0x80}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000a278fc007110130000000000950000000030c936081f01010000af1cee52428ae8c28c81156b52d01c741ed230ebc5c3e0bdf817333d77a9c890d29b1d9492f42830d4bdfad139d60a7b519d6d47b0b1a28f8512b5b209fe16f9801d8e26a412491e4db5559d484732668dbe0e070443ca9f92da03707d8ea882de7ef1f464aa778f31"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x80) [ 413.380693][ T6000] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 413.499182][ T4378] Bluetooth: hci6: command 0x041b tx timeout 17:11:35 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) mq_timedreceive(r4, &(0x7f0000000840)=""/147, 0x93, 0xaf5, &(0x7f0000000900)={0x0, 0x3938700}) 17:11:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 413.758783][ T6014] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:35 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) [ 413.885420][ T6016] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 413.898201][ T6019] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:35 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) 17:11:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 414.424450][ T6028] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:36 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) 17:11:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 414.765499][ T6032] fuse: Bad value for 'fd' [ 414.785486][ T6031] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 414.929737][ T6036] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:36 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) 17:11:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) 17:11:36 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) 17:11:36 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) clock_gettime(0x0, &(0x7f0000000480)) [ 415.462194][ T6047] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0x0, 0xffff8881a56043d8}}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) write$binfmt_misc(r2, &(0x7f00000006c0)={'syz0', "c1099e0e077b5e6133b1c034d6f5c721299c4d480868a9a0b029a35708387673a26ac59ff4778ab6a92646b86a63c6675ac4b5bad1e0eaf8ee89010eb6e95133787ad8b609d73cb8a241d428866e3df9270dd5abe183fc92ce0ae70c7173db613dc07bceaf7a454a9cfc404d1af7a72c98cfc375a1bddfcc93f7e90e16903888ed94212b1bae7aeed48f64f6be6876d638179cf0c4ae69b02f986872a180dcbc59b86a2b4c63538c77c2c4e774df6cdc044807ea"}, 0xb8) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x408d0}, 0x4000094) r11 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000091) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10088003}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_newnexthop={0x2c, 0x68, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r12 = accept(r8, 0x0, &(0x7f0000000500)) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3cd58f40cfe5f11e070000001000010400eeffff11feffffff000000edf7125f73be04ef348e8ee914896225953fa603e6f0c19c890a80105a9542d89cb244676f8fbeadf1908bf831a93f208a7b172fe72e47a5a04c8cf28becec708d073a21e59ce14efcc60a28ebc45c18a6a865184df3e4fccb65f43ce0230cd9262f59ab81d5fa2cda1e1af9f77f3ea6b7d23b3f4f1cb54662ba9c", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 17:11:37 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) [ 415.578595][ T4378] Bluetooth: hci6: command 0x040f tx timeout 17:11:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 415.746313][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:37 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x8) 17:11:37 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) [ 415.847376][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 415.932944][ T6064] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 415.953471][ T6061] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 415.977756][ T6067] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:37 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) [ 416.229385][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.470750][ T6071] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 17:11:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) 17:11:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 17:11:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0x0, 0xffff8881a56043d8}}}) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) (rerun: 64) write$binfmt_misc(r2, &(0x7f00000006c0)={'syz0', "c1099e0e077b5e6133b1c034d6f5c721299c4d480868a9a0b029a35708387673a26ac59ff4778ab6a92646b86a63c6675ac4b5bad1e0eaf8ee89010eb6e95133787ad8b609d73cb8a241d428866e3df9270dd5abe183fc92ce0ae70c7173db613dc07bceaf7a454a9cfc404d1af7a72c98cfc375a1bddfcc93f7e90e16903888ed94212b1bae7aeed48f64f6be6876d638179cf0c4ae69b02f986872a180dcbc59b86a2b4c63538c77c2c4e774df6cdc044807ea"}, 0xb8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x408d0}, 0x4000094) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000091) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10088003}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_newnexthop={0x2c, 0x68, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r12 = accept(r8, 0x0, &(0x7f0000000500)) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3cd58f40cfe5f11e070000001000010400eeffff11feffffff000000edf7125f73be04ef348e8ee914896225953fa603e6f0c19c890a80105a9542d89cb244676f8fbeadf1908bf831a93f208a7b172fe72e47a5a04c8cf28becec708d073a21e59ce14efcc60a28ebc45c18a6a865184df3e4fccb65f43ce0230cd9262f59ab81d5fa2cda1e1af9f77f3ea6b7d23b3f4f1cb54662ba9c", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 416.772019][ T6083] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) [ 416.919907][ T6088] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 17:11:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0x0, 0xffff8881a56043d8}}}) (async, rerun: 32) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) r2 = openat$cgroup_procs(r1, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) (async) write$binfmt_misc(r2, &(0x7f00000006c0)={'syz0', "c1099e0e077b5e6133b1c034d6f5c721299c4d480868a9a0b029a35708387673a26ac59ff4778ab6a92646b86a63c6675ac4b5bad1e0eaf8ee89010eb6e95133787ad8b609d73cb8a241d428866e3df9270dd5abe183fc92ce0ae70c7173db613dc07bceaf7a454a9cfc404d1af7a72c98cfc375a1bddfcc93f7e90e16903888ed94212b1bae7aeed48f64f6be6876d638179cf0c4ae69b02f986872a180dcbc59b86a2b4c63538c77c2c4e774df6cdc044807ea"}, 0xb8) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x408d0}, 0x4000094) (async) r11 = socket(0x10, 0x803, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000091) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10088003}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_newnexthop={0x2c, 0x68, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x4, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r12 = accept(r8, 0x0, &(0x7f0000000500)) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3cd58f40cfe5f11e070000001000010400eeffff11feffffff000000edf7125f73be04ef348e8ee914896225953fa603e6f0c19c890a80105a9542d89cb244676f8fbeadf1908bf831a93f208a7b172fe72e47a5a04c8cf28becec708d073a21e59ce14efcc60a28ebc45c18a6a865184df3e4fccb65f43ce0230cd9262f59ab81d5fa2cda1e1af9f77f3ea6b7d23b3f4f1cb54662ba9c", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 17:11:38 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r6, &(0x7f0000000400)={0x11, 0x1a, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 17:11:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:38 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r7, &(0x7f0000000400)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @remote}, 0x14) [ 417.456095][ T6105] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 417.658598][ T4378] Bluetooth: hci6: command 0x0419 tx timeout 17:11:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:39 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) 17:11:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:39 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) bind$packet(r6, &(0x7f0000000400)={0x11, 0x1a, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 17:11:39 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) [ 418.029415][ T6122] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 418.049868][ T6123] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 418.073992][ T6125] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:39 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) 17:11:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:40 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 17:11:40 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cgroups\x00', 0x0, 0x0) 17:11:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:40 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 17:11:40 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) socket$packet(0x11, 0x2, 0x300) [ 419.127131][ T6140] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 419.137425][ T6139] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 419.211015][ T6143] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:40 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) socket$packet(0x11, 0x2, 0x300) 17:11:40 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) [ 419.647918][ T6151] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:41 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) mq_timedsend(r4, &(0x7f0000000740)="011655c6cfc62a3d093376247cdceea25a2bd654097ed93d6df7dfd86e2aa7218640cc291b352cd7625bba1bfa23eea7fec238240f1ed0657527849837daabef72b5bd955aa8dee50888b4d1133c0b8e0b16221e2b672dda338231e3bbc143c1b7c54969e35f8efee06235809bdf2f1ab97b7f37e4fac82955d4840bc35a795ca16f80897b5b27e142eea6fc8bc1129e7db1a3bb8a740eba70d9010b352a20d6deb75256d2e0bb7ca67d841529de15a9f7da9e9c0b136c4643f5b46a8657bd3773e10117599da711a0c46fc4f50497a01de09a1e212984bf82311c49e30fde2640086ce70493ee3b4927431414ca1ef4e10977", 0xf3, 0x1000, &(0x7f0000000440)={0x77359400}) 17:11:41 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) 17:11:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:41 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') 17:11:41 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r4, 0x4, 0x0) [ 420.387103][ T6165] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 420.446880][ T6168] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:42 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 17:11:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') 17:11:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) [ 420.652780][ T6174] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:42 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 420.938353][ T6180] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 421.556143][ T6190] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:43 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) r3 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) recvmmsg(r3, &(0x7f0000003100), 0x0, 0x40006040, &(0x7f0000003240)={0x77359400}) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 422.020729][ T6200] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:43 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) clock_gettime(0x0, &(0x7f0000003200)) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:43 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:43 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 422.254575][ T6206] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 422.547432][ T6216] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 422.664723][ T6213] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:44 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f00000033c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:44 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:44 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f00074000000000001900b0090780000000046000000000000000000000000000000ffffffff443700d1ac1416aa00000000ac1e0001c96bb5429aed000000000000000000000000000000000000000000000080000000006401010000007188954d927f2bacc1dbdc3c0b00000000d56a000000000194040000000000e08bdd551c5693658b7bd55b359b605e0c900c89fecf1028c4998dcb9aa606b18a87b7766863f63c5577484a26a2a1592328faa1ec11af880ddd69c47146486f5d815630894bf7cac0d840c4c5c6ecfec6a36a4accd4ba0674af4b3f6c2429fb1ab754b829510d937e2224348349ab7293e2856afed553e8f406ec58d9aafea346c8ae201dacb8c29f1dd9d36af1a8282448a99372fa5d8b51d044df4562484f36f995faf4bea00eb301f848290ad6852ff517acc754088570377e931211bbf495bae6bc21abefe6fc3b22bd1ac27f41b95026d2ce96e2f9157963b423d5dea533d620e355c8e49c3920206ba129adf06f"], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003380)='memory.current\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 423.349140][ T6233] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 423.426591][ T6234] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:45 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:45 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:45 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:45 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 423.960933][ T6244] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 423.977200][ T6241] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:45 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 424.222448][ T6253] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:45 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:46 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 424.530960][ T6261] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:46 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 424.969143][ T6269] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 424.997644][ T6270] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:46 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 425.217553][ T6279] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:46 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 425.868136][ T6291] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 425.948649][ T6299] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 426.085982][ T6302] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 426.164034][ T6307] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:47 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:47 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 426.538591][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 426.544686][ T4378] Bluetooth: hci1: command 0x0406 tx timeout [ 426.550787][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 426.556817][ T5109] Bluetooth: hci3: command 0x0406 tx timeout [ 426.563546][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 426.568509][ T5122] Bluetooth: hci4: command 0x0406 tx timeout 17:11:48 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:48 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r5, &(0x7f0000000300)={0x18, 0x0, r7, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:48 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:48 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:48 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 427.015559][ T6324] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 427.113700][ T6330] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 427.158277][ T6332] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:48 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:48 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:48 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:49 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 427.711419][ T6343] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:49 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r5, &(0x7f0000000300)={0x18, 0x0, r7, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:49 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 428.230251][ T6354] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 428.257443][ T6352] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:49 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:49 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:50 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 428.700960][ T6362] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r5, &(0x7f0000000300)={0x18, 0x0, r7, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:50 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 429.103013][ T6370] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 429.133905][ T6376] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:50 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 429.180731][ T6375] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:50 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:51 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:51 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:51 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 430.082909][ T6396] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:51 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 430.187702][ T6399] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 430.293266][ T6405] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:52 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:52 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 430.623770][ T6412] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:52 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 430.704208][ T6415] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:52 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:52 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 431.357557][ T6428] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 431.388256][ T6430] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:52 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:53 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 431.608788][ T6437] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r6, &(0x7f0000000300)={0x18, 0x0, r8, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:53 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:53 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:53 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:53 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 432.046072][ T6447] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 432.086846][ T6450] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:53 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r6, &(0x7f0000000300)={0x18, 0x0, r8, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:54 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:54 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 432.575972][ T6460] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 432.705973][ T6464] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:54 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:54 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r6, &(0x7f0000000300)={0x18, 0x0, r8, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:54 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 432.992254][ T6469] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 433.068948][ T6476] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:54 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:54 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 433.507943][ T6491] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:55 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) 17:11:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:55 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) [ 433.878151][ T6496] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 433.898017][ T6497] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:55 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:55 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) 17:11:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 434.263671][ T6507] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:55 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) 17:11:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 434.397406][ T6510] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000003400)={0x18, 0x0, {0x0, @local, 'ipvlan0\x00'}}, 0x1e) 17:11:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 434.592238][ T6513] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) 17:11:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 434.834935][ T6522] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 434.914725][ T6525] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 434.926359][ T6527] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) [ 435.022183][ T6530] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) 17:11:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 435.899185][ T6539] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 436.003446][ T6543] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 436.119248][ T6547] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 436.246687][ T6550] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 436.289477][ T6548] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 436.331763][ T6555] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 436.393925][ T6558] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 436.434449][ T6556] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 437.255065][ T6566] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 437.775700][ T6573] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:11:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:11:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 437.895821][ T6576] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 437.926915][ T6577] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 438.088162][ T6580] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 438.211311][ T6584] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 438.232238][ T6587] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 439.087174][ T6596] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 439.278520][ T6599] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 439.361608][ T6602] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 439.457402][ T6603] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 439.829046][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.835383][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 17:12:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 440.166154][ T6609] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 440.275241][ T6613] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 440.445727][ T6619] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 440.576028][ T6623] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 440.664595][ T6627] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 440.956045][ T6631] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 441.393511][ T6634] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 441.875589][ T6640] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 441.941542][ T6643] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 442.227927][ T6647] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 442.929494][ T6653] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 442.939819][ T6655] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 443.578143][ T6662] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 443.632964][ T6663] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 443.820203][ T6667] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 444.740648][ T6676] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 444.838981][ T6675] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 444.869844][ T6680] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 444.990019][ T6682] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 445.322486][ T6688] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 445.519281][ T6691] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 445.786616][ T6693] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 446.045223][ T6697] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 446.078838][ T6698] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 446.710765][ T6703] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 447.018061][ T6706] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 447.141907][ T6712] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 447.161432][ T6713] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 447.184722][ T6709] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 448.009337][ T6723] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 448.088794][ T6722] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 448.100587][ T6725] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 448.191725][ T6727] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 448.205188][ T6730] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 448.840397][ T6736] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 449.085185][ T6743] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 449.099494][ T6739] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 449.109702][ T6746] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 449.171572][ T6748] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 449.229549][ T6750] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 449.927177][ T6758] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 450.061064][ T6765] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 450.100942][ T6760] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 450.146899][ T6768] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 450.303847][ T6774] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 451.056073][ T6779] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 451.070431][ T6777] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 451.115187][ T6782] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 451.209790][ T6783] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 451.812512][ T6789] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:13 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 451.957580][ T6790] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 452.073443][ T6794] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 452.302950][ T6798] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 452.415424][ T6803] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 452.456139][ T6804] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 453.061659][ T6806] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 453.091546][ T6809] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 453.225145][ T6813] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 453.486865][ T6820] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:15 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 454.026429][ T6825] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 454.097348][ T6826] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 454.132902][ T6828] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 454.151459][ T6831] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 454.624159][ T6837] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:16 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 454.947481][ T6843] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 454.993621][ T6845] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 455.009414][ T6847] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 455.294416][ T6854] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 455.840271][ T6859] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 456.117798][ T6862] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 456.136873][ T6863] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 456.356079][ T6869] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 456.517367][ T6868] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 456.597470][ T6871] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 457.265071][ T6881] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 457.383883][ T6883] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 457.533204][ T6887] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 457.821699][ T6892] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 457.923361][ T6890] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:19 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 458.474766][ T6897] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 458.530963][ T6899] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 458.731032][ T6904] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 458.918165][ T6909] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 459.221631][ T6916] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 459.784117][ T6921] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 459.930196][ T6925] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 460.007751][ T6919] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 460.086973][ T6928] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 460.524071][ T6932] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 460.856701][ T6940] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 460.900298][ T6941] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 461.191673][ T6945] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 461.721319][ T6951] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 461.946751][ T6960] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 462.030631][ T6962] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 462.287535][ T6966] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 462.646687][ T6975] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 462.696970][ T6974] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 462.934727][ T6980] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 463.095953][ T6983] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 463.136867][ T6985] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 463.375939][ T6992] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 463.977643][ T6997] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 464.239099][ T7002] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 464.374102][ T7006] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 464.666125][ T7011] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 465.438774][ T7022] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 465.547713][ T7031] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 465.630280][ T7025] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 466.250285][ T7035] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 466.511379][ T7042] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 466.531933][ T7041] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 467.110434][ T7047] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:28 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 467.403075][ T7055] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 467.512839][ T7057] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 468.230725][ T7069] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:30 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 468.500513][ T7073] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r5, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:31 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 469.727427][ T7093] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 469.737243][ T7092] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:32 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 470.930046][ T7111] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 470.995492][ T7112] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 471.450465][ T7127] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:33 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 472.307636][ T7137] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 472.692636][ T7141] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 472.938889][ T7146] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:34 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 473.424978][ T7153] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 473.671436][ T7155] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 473.974440][ T7158] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 474.379961][ T7160] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 474.554424][ T7165] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 474.732149][ T7173] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 474.748254][ T7169] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 475.030793][ T7178] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 475.516290][ T7183] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 475.703430][ T7189] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 475.909189][ T7195] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 476.436704][ T7198] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 476.751442][ T7205] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 476.993555][ T7211] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 477.605647][ T7214] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 477.784541][ T7217] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 477.865511][ T7222] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 478.314605][ T7230] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 478.969805][ T7242] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 478.981509][ T7240] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 479.010047][ T7246] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 479.959425][ T7260] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 480.183827][ T7271] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 480.339500][ T7273] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 481.111179][ T7281] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 481.310446][ T7286] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 481.374367][ T7287] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 481.887953][ T7297] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 482.054870][ T7300] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 482.381204][ T7304] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:43 executing program 2: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 483.153020][ T7313] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 483.336380][ T7315] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:44 executing program 2: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 483.541608][ T7320] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 483.689533][ T7326] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 483.766244][ T7329] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 484.334682][ T7336] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 484.626039][ T7339] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 484.727657][ T7341] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 484.755410][ T7344] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:46 executing program 2: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 485.609727][ T7355] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 485.676215][ T7359] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 485.710203][ T7357] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 486.117985][ T7366] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 486.488256][ T7370] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 486.662857][ T7372] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:48 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 486.845938][ T7376] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 487.001307][ T7379] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:48 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 487.726887][ T7387] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 487.957364][ T7390] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 488.025069][ T7392] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 488.255069][ T7397] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 488.394563][ T7400] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 488.905577][ T7403] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 488.945197][ T7405] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:50 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:50 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 489.169310][ T7410] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 489.274228][ T7413] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 490.030032][ T7420] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 490.231654][ T7422] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 490.287058][ T7425] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 490.426069][ T7430] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:52 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 490.776787][ T7436] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 491.172708][ T7443] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 491.219717][ T7446] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 491.311993][ T7448] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 491.753157][ T7452] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:53 executing program 2: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 492.347634][ T7454] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 492.491798][ T7456] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 492.555955][ T7459] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 492.863460][ T7468] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 493.287488][ T7476] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 493.308152][ T7472] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:55 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 493.527512][ T7480] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 494.091066][ T7488] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 494.223380][ T7491] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 494.641841][ T7497] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 494.655491][ T7495] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:56 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 495.006876][ T7504] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 495.360257][ T7509] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 495.572326][ T7513] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:57 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:57 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 496.294588][ T7519] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 496.394715][ T7521] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 496.428022][ T7524] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:58 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 497.117788][ T7534] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:58 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 497.490495][ T7540] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 497.552597][ T7543] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 497.621125][ T7544] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:12:59 executing program 3: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:12:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 498.483767][ T7557] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:00 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 498.801353][ T7563] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 498.857677][ T7566] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 498.892855][ T7565] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 499.441948][ T7575] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:01 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:01 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:01 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 500.375427][ T7587] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 500.399346][ T7586] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 500.901076][ T7597] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:02 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:02 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 501.260175][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.266505][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.317879][ T7602] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:02 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r7, &(0x7f0000000300)={0x18, 0x0, r9, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:03 executing program 4: r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 502.247287][ T7613] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:04 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 502.831584][ T7622] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value 17:13:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:04 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 503.178521][ T28] INFO: task syz-executor.4:5838 blocked for more than 143 seconds. [ 503.186813][ T28] Not tainted 6.2.0-rc1-syzkaller #0 17:13:04 executing program 4: r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 503.276325][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.287834][ T7626] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 503.350338][ T7627] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 503.367012][ T28] task:syz-executor.4 state:D stack:27240 pid:5838 ppid:5107 flags:0x00004004 [ 503.516583][ T28] Call Trace: [ 503.546379][ T28] [ 503.613454][ T28] __schedule+0x9d1/0xe40 17:13:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 503.662565][ T28] ? release_firmware_map_entry+0x180/0x180 [ 503.724753][ T28] ? __local_bh_enable_ip+0x163/0x1f0 [ 503.774504][ T28] ? __lock_sock+0x1ca/0x330 [ 503.823002][ T28] ? _local_bh_enable+0xa0/0xa0 [ 503.872151][ T28] schedule+0xcb/0x190 [ 503.914865][ T28] __lock_sock+0x1cf/0x330 17:13:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 503.973561][ T28] ? sk_stream_moderate_sndbuf+0x240/0x240 [ 504.039139][ T28] ? wake_bit_function+0x240/0x240 [ 504.080860][ T28] ? __rwlock_init+0x140/0x140 [ 504.108608][ T7644] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 504.123828][ T28] ? mark_lock+0x9a/0x350 [ 504.151508][ T28] ? lock_sock_nested+0x66/0xf0 [ 504.175613][ T28] lock_sock_nested+0x99/0xf0 [ 504.238201][ T28] mptcp_sendmsg+0xfc/0x1cf0 [ 504.261084][ T28] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 504.276394][ T28] ? smack_socket_sendmsg+0x16e/0x530 [ 504.290991][ T28] ? smack_socket_connect+0x4e0/0x4e0 [ 504.311288][ T28] ? memset+0x1f/0x40 [ 504.328883][ T28] ? tomoyo_socket_sendmsg_permission+0x2ab/0x440 [ 504.360807][ T28] ? tomoyo_socket_bind_permission+0x360/0x360 [ 504.383994][ T28] ? mptcp_shutdown+0x2c0/0x2c0 [ 504.414584][ T28] ? sock_rps_record_flow+0x12/0x370 [ 504.442792][ T28] ? inet_sendmsg+0x80/0x310 [ 504.458892][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 504.496586][ T28] ? security_socket_sendmsg+0x9d/0xb0 [ 504.533606][ T28] ? inet_send_prepare+0x250/0x250 17:13:06 executing program 4: r0 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:06 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 504.549219][ T28] ____sys_sendmsg+0x597/0x8e0 [ 504.561829][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 504.581666][ T28] __sys_sendmsg+0x28e/0x390 [ 504.640345][ T28] ? ____sys_sendmsg+0x8e0/0x8e0 [ 504.668696][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 504.706190][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 504.725753][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 504.744342][ T28] do_syscall_64+0x2b/0x70 [ 504.778131][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 504.862800][ T28] RIP: 0033:0x7ff1a488c0a9 [ 504.894861][ T28] RSP: 002b:00007ff1a5510168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.952458][ T28] RAX: ffffffffffffffda RBX: 00007ff1a49ac050 RCX: 00007ff1a488c0a9 [ 505.011556][ T28] RDX: 0000000000000840 RSI: 0000000020000700 RDI: 0000000000000003 [ 505.031340][ T28] RBP: 00007ff1a48e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 505.071375][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.115852][ T28] R13: 00007ffc7e23944f R14: 00007ff1a5510300 R15: 0000000000022000 [ 505.146582][ T28] [ 505.157344][ T28] INFO: task syz-executor.4:5839 blocked for more than 145 seconds. [ 505.177765][ T28] Not tainted 6.2.0-rc1-syzkaller #0 [ 505.201169][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.213636][ T28] task:syz-executor.4 state:D stack:26384 pid:5839 ppid:5107 flags:0x00004004 [ 505.228324][ T28] Call Trace: [ 505.235591][ T28] [ 505.241848][ T28] __schedule+0x9d1/0xe40 [ 505.246463][ T28] ? release_firmware_map_entry+0x180/0x180 [ 505.258546][ T28] ? __local_bh_enable_ip+0x174/0x1f0 [ 505.264335][ T28] ? __lock_sock+0x1ca/0x330 [ 505.276123][ T28] ? _local_bh_enable+0xa0/0xa0 [ 505.281403][ T28] schedule+0xcb/0x190 [ 505.285760][ T28] __lock_sock+0x1cf/0x330 [ 505.297544][ T28] ? sk_stream_moderate_sndbuf+0x240/0x240 [ 505.311799][ T28] ? wake_bit_function+0x240/0x240 [ 505.375406][ T28] ? __rwlock_init+0x140/0x140 [ 505.434843][ T28] ? lock_sock_nested+0x66/0xf0 [ 505.449626][ T28] lock_sock_nested+0x99/0xf0 [ 505.454626][ T28] __mptcp_close_ssk+0x198/0x690 [ 505.460079][ T28] mptcp_destroy_common+0x58c/0xa30 [ 505.465502][ T28] mptcp_disconnect+0xc1/0x270 [ 505.484035][ T28] __inet_stream_connect+0xa3e/0xe10 [ 505.495109][ T28] ? inet_dgram_connect+0x3f0/0x3f0 [ 505.503106][ T28] tcp_sendmsg_fastopen+0x3b0/0x610 [ 505.530657][ T28] mptcp_sendmsg+0x307/0x1cf0 17:13:07 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 505.558254][ T28] ? smack_socket_connect+0x4e0/0x4e0 [ 505.571925][ T28] ? memset+0x1f/0x40 [ 505.581866][ T28] ? tomoyo_socket_sendmsg_permission+0x2ab/0x440 [ 505.591178][ T28] ? tomoyo_socket_bind_permission+0x360/0x360 [ 505.597539][ T28] ? mptcp_shutdown+0x2c0/0x2c0 [ 505.602836][ T28] ? sock_rps_record_flow+0x12/0x370 [ 505.609763][ T28] ? inet_sendmsg+0x80/0x310 [ 505.614547][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 505.621088][ T28] ? security_socket_sendmsg+0x9d/0xb0 [ 505.626769][ T28] ? inet_send_prepare+0x250/0x250 [ 505.633225][ T28] ____sys_sendmsg+0x597/0x8e0 [ 505.652081][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 505.657333][ T28] __sys_sendmsg+0x28e/0x390 [ 505.662785][ T28] ? ____sys_sendmsg+0x8e0/0x8e0 [ 505.667906][ T28] ? read_lock_is_recursive+0x10/0x10 [ 505.674460][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 505.680958][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 505.687110][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 505.693694][ T28] do_syscall_64+0x2b/0x70 [ 505.705080][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 505.718307][ T28] RIP: 0033:0x7ff1a488c0a9 [ 505.723232][ T28] RSP: 002b:00007ff1a33fe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.732767][ T28] RAX: ffffffffffffffda RBX: 00007ff1a49ac120 RCX: 00007ff1a488c0a9 [ 505.741862][ T28] RDX: 0000000020000851 RSI: 0000000020000fc0 RDI: 0000000000000003 [ 505.750348][ T28] RBP: 00007ff1a48e7ae9 R08: 0000000000000000 R09: 0000000000000000 17:13:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 505.758841][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.782422][ T28] R13: 00007ffc7e23944f R14: 00007ff1a33fe300 R15: 0000000000022000 [ 505.798762][ T28] 17:13:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 505.844498][ T28] [ 505.844498][ T28] Showing all locks held in the system: 17:13:07 executing program 4: open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 505.905045][ T7659] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 505.916289][ T28] 3 locks held by kworker/u4:0/9: [ 505.931896][ T28] 1 lock held by rcu_tasks_kthre/12: [ 505.986768][ T28] #0: ffffffff8d523910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 506.033935][ T7665] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 506.082755][ T7670] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 506.135387][ T28] 1 lock held by rcu_tasks_trace/13: [ 506.189976][ T28] #0: ffffffff8d524110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 506.309699][ T28] 1 lock held by khungtaskd/28: [ 506.386629][ T28] #0: ffffffff8d523740 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 506.493498][ T28] 3 locks held by kworker/u4:6/2419: [ 506.561009][ T28] 2 locks held by getty/4740: [ 506.592556][ T28] #0: ffff88802c343098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 506.700263][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 506.809728][ T28] 2 locks held by kworker/0:5/5160: [ 506.838259][ T28] #0: ffff888012872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 17:13:08 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 506.936960][ T28] #1: ffffc90004707d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 17:13:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 507.074331][ T28] 4 locks held by kworker/u4:8/5574: [ 507.133301][ T28] 1 lock held by syz-executor.4/5838: [ 507.275058][ T28] #0: ffff88807b300130 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_sendmsg+0xfc/0x1cf0 [ 507.286870][ T28] 3 locks held by syz-executor.4/5839: [ 507.292826][ T28] #0: ffff88807b300130 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_sendmsg+0xfc/0x1cf0 [ 507.303750][ T28] #1: ffff888022c4e330 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_sendmsg+0x28f/0x1cf0 [ 507.316103][ T28] #2: ffff888022c4e330 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: __mptcp_close_ssk+0x198/0x690 [ 507.327728][ T28] 2 locks held by kworker/u4:11/7062: [ 507.335162][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 [ 507.367301][ T28] #1: ffffc9000ac6fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 [ 507.430556][ T28] 2 locks held by syz-executor.5/7659: [ 507.486948][ T28] #0: ffff8880184840e0 (&type->s_umount_key#49/1){+.+.}-{3:3}, at: alloc_super+0x212/0x920 17:13:09 executing program 4: open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 507.572885][ T28] #1: ffffffff8d528d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a6/0x890 [ 507.634010][ T28] 2 locks held by syz-executor.0/7665: [ 507.648614][ T28] #0: ffff8880760500e0 (&type->s_umount_key#49/1){+.+.}-{3:3}, at: alloc_super+0x212/0x920 [ 507.660105][ T28] #1: ffffffff8d528d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46f/0x890 [ 507.671220][ T28] 6 locks held by syz-executor.0/7674: [ 507.677432][ T28] #0: ffff88801930a868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x242/0x2e0 [ 507.686923][ T28] #1: ffff88801de12460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x275/0xbb0 [ 507.705343][ T28] #2: ffff888076edc888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1f3/0x500 [ 507.749579][ T28] #3: ffffffff8d54b368 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xe4/0x280 [ 507.788167][ T28] #4: ffffffff8d3c1030 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x196/0x600 [ 507.825066][ T28] #5: ffffffff8d54b550 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x1ab/0x600 [ 507.854942][ T28] 1 lock held by syz-executor.3/7670: [ 507.938006][ T28] #0: ffff88809377c0e0 (&type->s_umount_key#49/1){+.+.}-{3:3}, at: alloc_super+0x212/0x920 [ 508.050978][ T28] 2 locks held by syz-executor.2/7681: [ 508.113725][ T28] 2 locks held by syz-executor.1/7683: [ 508.144837][ T28] #0: ffff88801de120e0 (&type->s_umount_key#48){+.+.}-{3:3}, at: grab_super+0x58/0x190 [ 508.207365][ T28] #1: ffffffff8d54b368 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_do_get_tree+0x1a9/0x670 17:13:09 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r6, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 508.315006][ T28] 1 lock held by syz-executor.4/7688: [ 508.330854][ T28] 17:13:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000540)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8240, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0xa00000, &(0x7f0000000580)={[{@default_permissions}, {@xino_on}, {@index_on}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{),:-^(-.\''}}]}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r8, 0x4, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x21}}, 0x50) write$FUSE_WRITE(r8, &(0x7f0000000300)={0x18, 0x0, r10, {0x5}}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) io_uring_enter(r5, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 17:13:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x6403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') lseek(r7, 0x4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 508.460677][ T28] ============================================= [ 508.460677][ T28] [ 508.547998][ T7695] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 508.557960][ T28] NMI backtrace for cpu 0 [ 508.562324][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller #0 [ 508.570409][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 508.580477][ T28] Call Trace: [ 508.583747][ T28] [ 508.586664][ T28] dump_stack_lvl+0x1e3/0x2d0 [ 508.591356][ T28] ? nf_tcp_handle_invalid+0x630/0x630 [ 508.596797][ T28] ? panic+0x770/0x770 [ 508.600864][ T28] ? tick_nohz_tick_stopped+0x76/0xb0 [ 508.606281][ T28] ? nmi_cpu_backtrace+0x255/0x560 [ 508.611387][ T28] nmi_cpu_backtrace+0x4e3/0x560 [ 508.616309][ T28] ? vprintk_emit+0x109/0x1e0 [ 508.620987][ T28] ? nmi_trigger_cpumask_backtrace+0x3e0/0x3e0 [ 508.627126][ T28] ? _printk+0xcf/0x110 [ 508.631272][ T28] ? panic+0x770/0x770 [ 508.635334][ T28] ? __wake_up_klogd+0xcd/0x100 [ 508.640175][ T28] ? panic+0x770/0x770 [ 508.644233][ T28] ? nmi_trigger_cpumask_backtrace+0xaa/0x3e0 [ 508.650289][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 508.656389][ T28] nmi_trigger_cpumask_backtrace+0x19b/0x3e0 [ 508.662357][ T28] watchdog+0xcd5/0xd20 [ 508.666546][ T28] kthread+0x266/0x300 [ 508.670623][ T28] ? hungtask_pm_notify+0x50/0x50 [ 508.675633][ T28] ? kthread_blkcg+0xd0/0xd0 [ 508.680210][ T28] ret_from_fork+0x1f/0x30 [ 508.684636][ T28] [ 508.688486][ T28] Sending NMI from CPU 0 to CPUs 1: [ 508.693736][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_enter+0x43d/0x800 [ 508.733461][ T7698] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 508.787205][ T7699] overlayfs: unrecognized mount option "mask=MAY_READ" or missing value [ 509.048973][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 509.055887][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller #0 [ 509.063975][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.074044][ T28] Call Trace: [ 509.077312][ T28] [ 509.080231][ T28] dump_stack_lvl+0x1e3/0x2d0 [ 509.084899][ T28] ? nf_tcp_handle_invalid+0x630/0x630 [ 509.090347][ T28] ? panic+0x770/0x770 [ 509.094405][ T28] ? vscnprintf+0x59/0x80 [ 509.098721][ T28] panic+0x316/0x770 [ 509.102602][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 509.108219][ T28] ? nmi_trigger_cpumask_backtrace+0x2b0/0x3e0 [ 509.114369][ T28] ? memcpy_page_flushcache+0x100/0x100 [ 509.119921][ T28] ? nmi_trigger_cpumask_backtrace+0x2b0/0x3e0 [ 509.126067][ T28] ? nmi_trigger_cpumask_backtrace+0x32a/0x3e0 [ 509.132216][ T28] ? nmi_trigger_cpumask_backtrace+0x32f/0x3e0 [ 509.138366][ T28] watchdog+0xd15/0xd20 [ 509.142534][ T28] kthread+0x266/0x300 [ 509.146617][ T28] ? hungtask_pm_notify+0x50/0x50 [ 509.151637][ T28] ? kthread_blkcg+0xd0/0xd0 [ 509.156241][ T28] ret_from_fork+0x1f/0x30 [ 509.160665][ T28] [ 509.163828][ T28] Kernel Offset: disabled [ 509.168150][ T28] Rebooting in 86400 seconds..