(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0x2f8, 0xf0, 0x208, 0x208, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@empty, @ipv4=@multicast1, @port=0x4e21, @gre_key=0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}, {0x9}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@rand_addr="958e4f4315d67dc552cdb1e0769103b0", @ipv6=@mcast1, @gre_key, @port=0x4e20}}}, {{@ipv6={@empty, @mcast1, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff], 'ip_vti0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x6, 0x6c}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @gre_key=0x9}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x29, 0x40, 0x40, 0x81, 0x800, 0x1301, 0x404}}, @common=@frag={{0x30, 'frag\x00'}, {[0x3ff, 0x7], 0xd79, 0x0, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x13, @ipv6=@remote, @ipv6=@mcast2, @gre_key=0x7, @gre_key=0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}}) 03:38:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:28 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08418330e91000105ac071") syz_emit_ethernet(0x5e, &(0x7f0000000880)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "020001", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x7, "3bb33084df"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 03:38:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="0593c8ee5feeab1e6a7b66c49f82deb69f52fe80a220576bc3998acb76a227291e12c39249987de753674112a1a7", 0x2e}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0832b13501800000710f", @ANYRESDEC=0x0, @ANYRES32]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:28 executing program 5: request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x41c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x2aed87b91ce6575f}, 0x1040, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x4e0940, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x3c) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000880)=ANY=[], 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 03:38:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0xd4e, {0xf1d9293, 0x2, 0xc2, 0x4, 0x658, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x23}) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[]) 03:38:29 executing program 3: 03:38:29 executing program 3: 03:38:29 executing program 3: 03:38:29 executing program 3: 03:38:29 executing program 5: request_key(0x0, 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7f, 0x41c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x2aed87b91ce6575f}, 0x1040, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x4e0940, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x3c) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000880)=ANY=[], 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 03:38:29 executing program 3: 03:38:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:32 executing program 3: 03:38:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r4, 0xfff8, 0xa7, "eaca3585d6e4ff7eb2c7fa2d465bc9000000a0f7042d200b4dba665f3be8ba823453d88e9a16ae54aad5c7158eaf116b65a1168afa717718de6480fddf9d9aa85de7573394b6494f81812c7466953afc5c94921175b5f2e42a5af13986d64e7806b9e0bf48f4db2b50e9635c92ba5987e05e3e759665b862a967c1ec3992f9f603f3f26b0574163fafd1d723d6fbca25f3cc62226752f5caf957af8c1f22b0351ceff31d50c4d9"}, 0xaf) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r4, 0x10000}, &(0x7f00000001c0)=0x8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:32 executing program 5: write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty=0x300}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) write(r2, &(0x7f0000000480)="fc0000005d000724abeeb140e4e6fecc9a9d8e09777fa209254ec100070007ab08001b000000f0ffff002100057e009c33418635e78379880b5cf4c9ca99966dc6c59aa7ed27c918787642d53c2b2db504a0ebaf38c520fb91f606ce2cba8c63129721ce99f75a5d41b81428a31733fc3a2e6a6cd903b849619cab536a909187982a740c35eeab5956e99b7abf47b0fd9873c8e91d8837a74562af019b9f24c00a9929c1504fed54fe963e7641d5ca7b22b1c5f3b078fe4d6c2cfdb40f20519ebc7ff538f68d2ec7c19bef59fe47d37f2c060000000022496959433c591814b7fad35b339e976af8f2c1c4086d0363000000000000000000005297ae246c6073356d0b486d1e2c150f5ef9", 0x10b) close(0xffffffffffffffff) 03:38:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x2022802, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 03:38:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="6881b9b72af6e3971b06e8b9dac3407376adf72d1b7eee68be0d4800b2c01457968e386ad4c5f800e0a9176fa7fab3dc1c36b5d05f1337f88ca8c1b7b487d713824f79846c78e6120eeead7309788565b4366cc4c286ded8c3e6de00e39d41a7", 0x60}], 0x1a214e5, 0x0) 03:38:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:38:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f20e06635200000000f22e00fc79fe10d66b9930b000066b8fcffffff66baffffffff0f30b892048ed0640fc76c6ff40f01bc0c00f264f637b808008ed03e0fc7bb0900", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000038000/0x600000)=nil, 0x600000, 0x0) 03:38:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) socket$inet(0x2, 0xa, 0x20000800) 03:38:32 executing program 5: 03:38:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:35 executing program 5: 03:38:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_read_part_table(0x1, 0x4, &(0x7f00000004c0)=[{&(0x7f00000002c0)="1eb7ee94df10e4ee2e0ef5c1ef973832b6e8de6ac4a3030056431b932b9623a2ce71b984d2d8b246902d5485ef75feadf266b5bb7ee285c900cca82c9cb69a7874399a5d8f3420e6b5416716282218ac049abe49defb1414221a45905bef95d0c0dd58f3847af54e809c6c73f969604b3cf92967b60703ed4765833f64b5b4c0796d02b96554167fe8843637f03aea323149c1aaabab3aade3ccec0ac3ca356276e7a11fe4b1298dad", 0xa9, 0xffffffff}, {&(0x7f0000000380)="9eadb1d730bb2f659b69c397ffea27c8196c47e8aadbdbbec027d9bc34a1c90e1d8a217490eccb128dc542ce5e4666e2c2bc7177f13de4f0e9e037f00d5cfe48127c3d6ac7ec58445cb389595b7abde100632aeb64c153b958c82e980d227e24d9e551e5771f0e", 0x67, 0x3}, {&(0x7f0000000100)="25a67415d4646449ddc096f69f5ffc1613874f343e66c15d584791664bd9d7893f60e1de7b0b9670a2c053", 0x2b, 0x80000001}, {&(0x7f0000000400)="06d8b9f577802de1172a5f5645724f01f6466e451d184036a8773de2da9dcff441a754d059f453b76d84dc64a70b12be1dd157203c05cd43eaa3dcd93f8f81483eb2dcda9190581d66f38cc0c4546d1dab3c775a26838c8634c4ed2e96f77fc6add51d6b22da4edf0cfdb7f02823c5b3fa7871bd48fd62a2c8d0f281661e8c9633a4d03f907889a9aa0326e11a7e252eb48298b1bc595a6ecdf8ccae3c1f26b64cdafad129ca441daf8689f7b45fcebf", 0xb0, 0x4}]) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:35 executing program 3: 03:38:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) write(r0, &(0x7f00000002c0)="21f68b33e5c94761a60d8e89924fe2292e8f07dca501afcfb95729eb3bd151546411fa018c807750423ab26dd5ba8c5b44fd10e0fc930129bd6b2c789f8692ccfbc2610a016f24c0cccc51847760f348c37c124f98accac864a1a1", 0x5b) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:35 executing program 3: 03:38:35 executing program 5: 03:38:35 executing program 3: 03:38:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:35 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7977f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07fd00b0000002cab154ad029a119ca3c97278087001460af81c5f4adaddd1410e80207c14140c427dc16e8b00d5ee4e5e3ae703f8ea4c3dab45f912191f9df3d7c0cf0ea4f31d062d3d6e1d09f0479c9fb55010840331c9825f9386cb5c8f7e49348d27d915b8e9349b17f7aab0d75690d78d5f14805e127ca2aa3beea073a77127fbe389324001aaae7efad93aa48d33a01e41fb317227369a10fd7bfa641635e8077e71db299396591fb8197e4e84aa17ae2f75f4c49b552748a54d1ef8ee18449a2dbf3c778e86cc74307267206abb801426c3e956d42014a0bd51815e17b489de1461f3d79b87c3ac774f9bb79d88a089cddf2155073"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r1}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581fffffff00004000632f77fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:38:35 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000040)='cgroup.stat\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)='ip6tnl0\x00') 03:38:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="32a620192a6d4c2fb584cad054f9f61a2cc1c03cf4540de3390609e21d5a874b6d0f569984ec4c5d03b2a9cd84a76eda65231e4cc7a87f71e6c05f470b4ca2c2185225c2c6db5acd6e262d98c55e03d313363fcacc6b5538a82d7b73f5c918ee42589eed6f18a9b14e5911c1", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB="9bd595a51e026ec8863d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20004004) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/70, 0x46}], 0x3, &(0x7f0000000480)=""/155, 0x9b}, 0x0) 03:38:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31020110, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 03:38:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x60) 03:38:35 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b70200e580268e01acec330b5b1c88520003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffff0500000000000000c61c965e357e6edc000004040b5682a43f989156e4c9506c00000001007060b7030000000000006a0a00fe00000000850000000d000000b70000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0xe80, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100003a00632f77fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000040)) 03:38:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 684.389518] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.398586] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.413528] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.423603] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 03:38:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) creat(0x0, 0x0) 03:38:36 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 685.910253] NOHZ: local_softirq_pending 08 03:38:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030dcde5260303030303030303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:38 executing program 5: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) 03:38:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f0219858fc9b1b6a79abf8e3a46e88b64653d300530303030303030302c757365725f698e9b6dedfb87db088225f8f1b9f9010c20893d9d34a176d4af0e967fe89f9b9334fd1f9acd55e62fe0e127d9b4617bc336ab20caa6b96b5a34f01cb32505117958a0f7284f0b1ed83f5e0c3ce5cc65314bf94db2f987289a08dfe610cfe9d4c81970a06c45faeb18d807ce969c44480f0b81fc0a5cdfcb28ea09a87e3088f50e3598ff1e7f71f26660e9cb1643944a56ec98f4fcad61cb9f5e7118c35be7640e092ec5a083093d29d7aecfa9fa4d1926f738be73c761d493e08736a69e4b3ae9157fe33d4438f7626c29cdcb4f109f6d8fc0ffc4bada4e6b6345735ccfaa85bf690a00fe5ef6f5a33f9256f1295d3db40000000000000000a196fca1a731b546ec81204d915a3561e8e7a46b0125395e800549bf7865d31c06b53a86537ca0922ac9535530af720dccec8647747c3645077f8dc33eb46787086364ad911b083169aa87cfff4cfe", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10010, r0, 0x82000000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xa0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1167726f75705f10eb3d9499e88e88144e248cd21e4f709accd224d8d02640850e27b930a28ca9b381c3eb6e18cf92ae5b44eaf6d8bdf07c49c9b60effec74107c65129b9ee9cbdc9674db9b925731ccbc405579107f28b99e6e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x8080) 03:38:38 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="c6"], 0x1) 03:38:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 03:38:38 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) [ 687.098154] audit: type=1400 audit(2000000318.360:127): avc: denied { map } for pid=28894 comm="syz-executor.2" path="pipe:[100462]" dev="pipefs" ino=100462 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 03:38:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x31020110, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 687.367660] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.422267] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.502156] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.545839] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 03:38:38 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:38:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 03:38:39 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x374}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:38:39 executing program 1: prlimit64(0x0, 0xc, &(0x7f0000000240)={0x9, 0x465107d6}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000280)="5a566030be93e75e03c772cbdbecfd5e475407010449651fccf065df96de02c78d3e469fedc9fa9cbcd7f421cde1e2d89b3ac5f720c430c099e25a86cf947613f422993b8fe7b2f9baf8eca15975e78cd4", 0x51) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2bdd"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c5fdd116e5d592a69975724ddee703e69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:38:41 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x401412fd, 0x0) 03:38:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0006000000bd8e528d4830295e"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:41 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readahead(r0, 0x7000000, 0x0) 03:38:41 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x400812fa, 0x0) 03:38:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000002980)=[{&(0x7f0000001600)="d083b8778d9e055daedb2fb28df629afabdb0b25311ef1e77295a000a43e2610b846a5a59c06a800d3d76df145cad9aaddefb439dffeeefe701249890b0ea7339ca9794b6cf290548aba931a5059dedce4d27e6263d686d6f1504ecfc3bdccec85c073b5b71f298737ae4c7e96b8d6df30992b9ebb633ddeb1f6056cee4ccb0d9a1ede01060515292db70380408c1cf148566149f1402c4fd539424b", 0x9c}, {&(0x7f00000016c0)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5cc26106b7db3a6b8796ce064e031f8f35e3f749cb730bb38dcfb2cf9155bf417d427a6ea7c2284e317a87736058c4140d8fe5d67450f4e38f91d2457b1f20672e51d2a112668d420a0711cb6ecd2cdbda5cc1dcb6e7722f80eead66d8", 0xaa}, {&(0x7f0000001880)="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", 0x1fb}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7508bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:38:41 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) 03:38:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000000002000000e00000020000b1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000200000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/400], 0x190) 03:38:41 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x7, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643dd8374982b2db6ef307ffd3e0491792fc03d6c3c4b40a26d663", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=r2], @ANYBLOB="2c726f6f746d6f64653d0600303030303030303030303030314c303030303030512c557365725f69643da80224d3c2bbcaef6054398bd78c67cd8b795c575c297d4a0e772213c4d8fb7f30ddd2aed2b9984b1b99d0a981dfe2a34ea1ec40284ec581220beeea8072821db350254a135c20d4787e9dd72dc59d5fc6b726462a73", @ANYRESDEC=0x0, @ANYBLOB="2c58726f7570aaa891c2a7e474f9565fc5cfae", @ANYRESDEC=0x0, @ANYBLOB="2c008b6d2a84ca0704d2edbb61225936a5c50c42e23d04699afce2293c0214a1f611daa7b71df9be692acb8760e4a28a6f6433292816d59439bccf0023f11b7bad3b30b5eafb31c4c7c11fdeade5f07657c654076cf06cb952f353322e555487b3603bb083c72704ae94e521da8ae29796eff63dc7e1ae909f4f3fc0e10672a16bc7cfc9d749d30f3830546f5bb7a4c2e1a691e9b138f2d97aa61a094931002b1669f495e8fce9a5ed97ace5648c8d2b5f918d7538a3c2be53091846f0fbfbf544cca0041e004ba4d2071c421ff85585ae84f06f3488496e9292a93d8a9b8a1704"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_GET_DUMPABLE(0x3) 03:38:44 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x7) setresuid(0xee00, r4, 0x0) ioctl$BLKPG(r0, 0x125f, 0x0) 03:38:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x40000ff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) creat(0x0, 0x0) 03:38:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x1000, 0x9, 0x4, 0x1, 0x4, {0x77359400}, {0x1, 0x0, 0x0, 0xff, 0x7, 0x4, "da8f049e"}, 0xfffff280, 0x4, @fd, 0x1, 0x0, 0xffffffffffffffff}) write$P9_RXATTRWALK(r4, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0xf) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7ffffffffffef, 0x11011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) [ 693.152029] audit: type=1400 audit(2000000324.420:128): avc: denied { map } for pid=29018 comm="syz-executor.3" path="socket:[100577]" dev="sockfs" ino=100577 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 03:38:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_GET_DUMPABLE(0x3) 03:38:44 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 693.519726] overlayfs: invalid redirect (./file0) 03:38:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_GET_DUMPABLE(0x3) 03:38:44 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 693.545378] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:38:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x4, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 693.727923] overlayfs: invalid redirect (./file0) 03:38:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000680)=""/35, 0x23}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/15, 0xf}], 0x4, &(0x7f0000000580)=""/115, 0x73}, 0x6ac9}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/185, 0xb9}, 0xd78c}], 0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:47 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_GET_DUMPABLE(0x3) 03:38:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="cc641043eb03d948381a64a16092edc3f58dded4b7cd2bdfb0ef4ff1422e701fd86dac57dbe1a3bd2d653e3d4b2c8ab263206750a560e70ddbddddf2d9ebe0c6d30e77bf0730d81ec971bd", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='[U']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@local, 0x24}) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c72f4dc72b46e73b11d9ca64c7c8fda96e31ee78cbd58e6457b1f7be799fd1726d80e42f7a166b9199edc76e34e1e15a91e8c8ff6ae45aa2cdcff545265ec0c7eb57e9c03b5c9ed894037814a9ab5d116cf6bfa77e5fdcb420eaf9093693fc8c572270e266827c5326ea69dfdf967917c65615f81c5fe13ce39ee2d2cba968dc972c8df3a1492abe0a3121facca73431c05bc17bb5fb6d6338955d90e869d0286a7a606f00aa75e7f408d2789e28ed8"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 696.096525] overlayfs: invalid redirect (./file0) 03:38:47 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:47 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:47 executing program 5: umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 696.255522] overlayfs: invalid redirect (./file0) 03:38:47 executing program 5: umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:47 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:50 executing program 5: umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6864303030303030303030302a756365725f69643da4860a6bcb57c1ac08670b6c42d3470a26672207f2034c4b7751632c04ed42fab503b1c7a9542694cf56e94f2e66c6d6815521faa91be7f63e623a1300e051bdd0d955cb1a23fa0e0011830d0c630130e55f32d4debd432fcc5d6fc01cacfc2ee79c07b161d1609cb5fbda7c442404", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9c}, 0x0, 0x9e, 0x0, 0x9}, r2, 0x0, r1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 699.178557] overlayfs: invalid redirect (./file0) 03:38:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:50 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 699.322824] overlayfs: invalid redirect (./file0) 03:38:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 699.479883] overlayfs: invalid redirect (./file0) 03:38:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0xffffffffffffffaf, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x1, 0x3, 0x4, 0x80000, 0x81, {}, {0x5, 0x1, 0x9, 0x1, 0x20, 0x8, "02cf34e2"}, 0x6, 0x2, @fd=r2, 0x1, 0x0, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000100)={0x1}) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r3 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000000c0)="65ac40c625f36d7c78a17744a7130bc05ec8d64a66480013b5cf", 0x1a}, {&(0x7f0000000440)="f1e701e1a6b12d71c6be5a483eeb95c216f567434931cfbf9e08290828156378048d6a903061a4d66633f8d0568213598de60f5278d0fdee3cfef6b85dfc21cc6fcc5221e7b1c527f3b2fa8aa27440b72903c72236b3f10ab53606018e2fd53c584d09a0356159e09095f1173bf07536f4f9702f78d856b06bec9ba361e75156946a379cbcfbe3195dc3ecb9", 0x8c}, {&(0x7f0000000500)="01959a81d570e935c10fdd2d76b06c41ba0e6425cde2d91b1149e1198702da567bbb10b8ae70e2104c06027e8db41f9f9406fb42da62067b9fbfe6e6209faca54b5833a5630d12744d01d5a56eb234b947c1a8fcfb8c14b3f125a62f5fc66ecc58c55c93ad274c221f377c6e77a0eda79b5b89726ac3a4128e842167bf43a88c4468a174f49922629dbcac14daec4c2066a0361a674933cb18031c4539695d726f3cdd7d43428301a6ca8fc19a26cf", 0xaf}, {&(0x7f0000000340)="90276477edc8963d09693bc9132d5774ab30bcfd8b3dc81e1da1d7ebdef1303d", 0x20}, {&(0x7f00000005c0)="e194e93c892d3044ff978659222c257c20ad377d5caff590e87812b03047a8f9bebc48f43434e4dce05d4f57161bfff81e16b0d4ee0c69d5099fa9f1540807c37cb6131ef768d05b994c2155322fe766d11e1c28e53f9204cd66ef81c3f662fc607f1181cb2ed6ca727e51ca672fdfb3828ed23b388578ce13776c4f8378c56151aafababe5be64bdacdc742cdc6c7ca3dd5ac46af2a97e853081495d34cd5662b68d9b1eb8824e114cb08e729238c49a75fcea375661c1bc47fd1fad5a03dc2c29379a5715dc383cf4f0b2185cebcbc17", 0xd1}, {&(0x7f00000006c0)="0c7b16ddd72457db655642298408a8f514470762116b7675c4e0efef3bc253109750bf3808d2a01e3e768cd66d2bfd03867865e0c281a10825a54a2603b1538844b336585962108ae68dbc56ddc5839db054804c13fbd29f97409a20cabcab84f32aec42d90229bf24683ce6a9e33ea387e8960b4a4956d2f41b2a3d766dc1c955fd6a5f8b6f8979a23cd01cc82affadbdd657cef4429de47b3426dad5b62f7c6e67d237b1c4d5e5359fcb9caf66a82ffe253fbdcbc27901ea044d354b876c0998ecd297b81c88", 0xc7}, {&(0x7f00000007c0)="93a9a359e6f527c9b19ac2aa83cfa68cfb46493cb5e0b36915d900b45f0ee36cfeef4f23fe8e8a5b86bbc76aca292e7a044bd437e17a7a16cc75b88997cdc982c948d1cbbea96e3bdadc4ba47d1c38f9036976a627e07283bfa84fb906d2ff364bb2944e51d832fe0f02e0951708bfb36a26f8d0c9b9b09a53522ce3e7413f400c945acec957a58aeda0b6ccd24c6764d0fed9df6b4e2d71efa71b75b4f230bea4120d9353e88e5c65b655065a9e6a54253a72e7ab5cc128c082e93c7994d9d1ed0cd160a94af7854269f711c8aba6c8b9f1c9ffa75b5cb3663f4606f3cd2c232ee5971dab63b15344b295011beb013497ea", 0xf2}, {&(0x7f0000000380)="973b67fa485c74b3cd0af1c8c9ec5fa6647268486ce4d971ba058e5964c8c081cc35bacd7e01b22c47c509895bc55bbe800e8a338858517fc73d", 0x3a}, {&(0x7f00000008c0)="7d215e3714022a993334b94da1f3dc55f6cef1a0d66162a74380cc6493904c071d7d116dd306242ee4603951690d5f2fd2505713689664d47358a12ff58c80f31162f2c73e4f1ad381b190eca8fd762dba72753a17731e23a138046d0ffbfd2460de96d6d2bb67c4c50ea838a2a98d540782d4809634d4011292eb78d31fade0", 0x80}], 0x9, &(0x7f0000000b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}], 0x90, 0x50}, 0x90) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570a7f5643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 702.155340] overlayfs: invalid redirect (./file0) 03:38:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 702.250213] overlayfs: invalid redirect (./file0) 03:38:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', 0x0, 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 702.375685] overlayfs: invalid redirect (./file0) 03:38:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:53 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 702.546254] FAT-fs (loop5): bogus number of reserved sectors [ 702.572364] overlayfs: invalid redirect (./file0) [ 702.581053] FAT-fs (loop5): Can't find a valid FAT filesystem [ 702.799258] overlayfs: invalid redirect (./file0) 03:38:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @sco, @vsock={0x28, 0x0, 0x0, @local}, @vsock={0x28, 0x0, 0x2711}, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x9, 0xe9}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f646d6f64653d303030303c3030303030303030303030303030303030302c757365725f69643d60608d602c7eff5882623f34b9d09a54da0607d7d2b7aac19ae6d120753dd21ab0a953ce7d061bbb917bfa4de9876dc995643281fdc3f3d5314ed07df5d0d474681183392dfe", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:38:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726fff01000064653d3030303030303030303030ff07303030303030303030302a757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) creat(0x0, 0x0) 03:38:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@isdn={0x22, 0x7, 0x1, 0xf8, 0x8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000440)="29d41ef56572f1cf1c24728f73e651e52114411c822db3474017486e495442c962c72f243cacbc309bf4b952dee345069ac4c6e82558ad571dd7c5b33a209dcc352e1e26e89f23d248eea406118b4842a6a84f1a57c2685f78ec3ef3b5117facf8c3a6103157d8eeeb9a61fb8db10cbc18f09a281412b5a5a232b920561622bcb74c4fa35ce57cff3b6f", 0x8a}, {&(0x7f0000000040)="ae45ddb386736b542ad985", 0xb}], 0x2, &(0x7f0000000980)=[{0x78, 0x3a, 0x7, "06e59d8dd849f74567c92a3b89b56b65dcd5f18aea8ff04a111c8f53fe84dcd99a6be2f53c8bb5e3b4f75e56de9ca249ccc6be8bc9cdcdc0c6f00fed367ac9130a4d80fa2069acb942cb9d69cdecb7c51a558463b32f00dbcb7ecad9757e925d22"}, {0x70, 0x10d, 0x2, "90856d20f5a34b043a1c5f268e9168eb487083f55c7a86e81825b3538e667a5c10c0a6b55c20b7f639319affed2ca75e5ea26ef63d1390eb75a0f611d1e00f7211c34be93d87bd327230011b82a9eedec91569564504598b39d3a7653e42c73e"}, {0x110, 0x117, 0x2, "1a684d9de3f3463d4a45e12e20b65c20c395a824b91c4c02804605488b07c164211d0a1e3cc80c002e069181ae72bac7f4bc8c5f079b6902324c42e0ce55b877d6a69a7cfd7c737884f40e3c6108df910d291988f1edf036fc2a70373c161e54682a34f96c7e7a69417923f2f3e8969488d55ef27a26bd4403e4834241a0d06b2384a9d47d057759001d174f6cbfa8a29e6fa91ce993699bac52a87ce45c8895c53395e07e4850026352d09ac22fa10d96b7c299eb90b1550bdbf2dddf67f84837b52683d75e50a0c710b2adc20dc1afae488943800c88494c5faafcdaa13370a78237af6a384630b8b15c2e57da57e5c07401d38f0ff30b32ec84f94c99"}, {0x1010, 0x84, 0x5, "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"}, {0x88, 0x88, 0xfffffffe, "178eb9e1051360d327492435291cb14fdd6426e566d5519ae4117a0c8e86410469e3f1bcbb1033548027a8bd69b225580b15c1980d2c700a22a68858f334e1174e25eb94be02c3a3d88189a68c1bc269dac4fbf947f54eea4af036f9ed734e3db49e254f5234f37690f1241dcfb1999afd3568be"}, {0xd8, 0x10a, 0xfffffffd, "4d1cd0e3d0d75dfe3f8bf2fe9cfdd4134c2573458d1f0ad85f6b5bca60070112ac6eb8b95087a2333546b6352358364b6570ab45fdf33c1cbfc00c038dd393bb3fd620002a6e3bb634f5b0de7a244f70a8c6cb8f25611306bba3d2ceb9fbc6e23144af8bb99febeb681a2ef8145297e57739070eaeffe7f4541201857d310e7a4e2259180d75be0ae599f6f76c213a0801d310ffcc9bfd3d9ca11cd1f2784f3f139e11a10a1fa9eb21f8d06d4f0a31549b6c45f4d71b4028c55d1639f2b995212bebf2c32870e4"}, {0x18, 0x104, 0x9a, "0bf26af4c3d5"}], 0x1380}, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 705.233876] overlayfs: invalid redirect (./file0) [ 705.251708] FAT-fs (loop5): bogus number of reserved sectors [ 705.269710] FAT-fs (loop5): Can't find a valid FAT filesystem 03:38:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 705.437413] FAT-fs (loop5): bogus number of reserved sectors [ 705.443929] FAT-fs (loop5): Can't find a valid FAT filesystem 03:38:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:56 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 705.598342] FAT-fs (loop5): bogus number of reserved sectors [ 705.628253] FAT-fs (loop5): Can't find a valid FAT filesystem 03:38:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 705.795945] FAT-fs (loop5): bogus number of reserved sectors [ 705.805979] FAT-fs (loop5): Can't find a valid FAT filesystem [ 706.400290] NOHZ: local_softirq_pending 08 03:38:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:59 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000240)='./file0\x00', 0x116) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:38:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0xe, 0x2, 0x20, 0xfffffffe, 0x9, 0x0, 0xff, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="00b19f3ad5ca42fa584efce9a1456f3678e8b69c380010400000000800000019a66a3d62298da6fad1dade7843b38d000000000000", 0x35}], 0x1, 0x6) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303030303030302c6b7365725f69643d04cf9bde00d24459e6f3c76d130ddf6e039edb586201fa88b3b777397a0e0f9bcf22cee30961593c484c2012aec621636eace2be79d28a4456b2857562981271b9d1a6eb89e41c34283bb860f0e8c1bb6c493e33ad7d8e20ff247610b8fc62ee", @ANYRESDEC=0x0, @ANYBLOB=',group_ed=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={0x0, 0x42, 0x7b}, 0x0, &(0x7f0000000280)="d28a44bb9f2230208451a58ff267e023bf5479be5f100c65e4ebceb94521bc68eeed4af57e5b7a7ace53851824288259af86373b396253462f3fffa202639a69a2a4", &(0x7f0000000300)=""/123) keyctl$clear(0x7, 0x0) 03:38:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)=""/86, 0x56}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/30, 0x1e}], 0x5, &(0x7f0000000780)=""/252, 0xfc}, 0x2}], 0x1, 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x9, 0x9, {}, {0xffffffffffffffff}, 0x55dd, 0x1000}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in=@loopback, 0x4e23, 0x6, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x2f, 0x0, r1}, {0x9, 0x6, 0xffffffffffff8000, 0x8001, 0x100000000, 0x4682, 0x5, 0x3}, {0x27, 0xe6d, 0x100000001, 0x82}, 0x2, 0x6e6bc3, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x6c}, 0xa, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3501, 0x1, 0x1, 0x3, 0xffffffff, 0x2fe, 0x400}}, 0xe8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x10009e}, 0x0, 0xfffffffffffffffe, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fz=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:38:59 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:59 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 708.311069] FAT-fs (loop5): bogus number of reserved sectors [ 708.319887] FAT-fs (loop5): Can't find a valid FAT filesystem 03:38:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:38:59 executing program 3: mkdir(0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:38:59 executing program 3: mkdir(0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 708.488291] FAT-fs (loop5): bogus number of reserved sectors [ 708.498527] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x2000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:00 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x5, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:00 executing program 3: mkdir(0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='.\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYBLOB="28726f6f746d6f64653d303030303030085a250cd2f41a96955da3793030303030303030303030313030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r5, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESDEC=r0]]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:00 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 709.106930] FAT-fs (loop5): bogus number of reserved sectors [ 709.113815] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:00 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6759563eccceaa1257742154a76e680f1607726f75703edcd0356b05f29885170a15cd55d16102d24e0556e24e0cc16157fd432d49abd2f5aac90b1cb0763cba0d695072ad9e8fb14ccd6815638cb94170316c967c1ecaf27991b9b6034d6cbb95dd5ce9bea8d8089a93ab9a2bdd7e91e4aa6fc3b69398db92e60048", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) 03:39:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004940)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000001980)=""/4094, 0xffe}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000004b00)=""/69, 0x45}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/11, 0xb}], 0xa, &(0x7f00000007c0)=""/87, 0x57}, 0x4291a5d8}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002980)=[{&(0x7f00000008c0)=""/97, 0x61}], 0x1, &(0x7f00000029c0)=""/49, 0x31}, 0x5}, {{&(0x7f0000002a00)=@isdn, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002a80)=""/141, 0x8d}, {&(0x7f0000002b40)=""/11, 0xb}, {&(0x7f0000002b80)=""/237, 0xed}, {&(0x7f0000002c80)=""/139, 0x8b}, {&(0x7f0000002d40)=""/209, 0xd1}], 0x5}, 0x100}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002ec0)=""/218, 0xda}, {&(0x7f0000002fc0)=""/131, 0x83}, {&(0x7f0000003080)=""/58, 0x3a}], 0x3, &(0x7f0000003100)=""/242, 0xf2}, 0x60b}, {{&(0x7f0000003200)=@isdn, 0x80, &(0x7f0000003400)=[{&(0x7f0000003280)=""/11, 0xb}, {&(0x7f00000032c0)=""/83, 0x53}, {&(0x7f0000003340)=""/172, 0xac}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003440)=""/1, 0x1}], 0x1, &(0x7f00000034c0)=""/255, 0xff}, 0x934}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000035c0)=""/198, 0xc6}, {&(0x7f00000036c0)=""/244, 0xf4}, {&(0x7f00000037c0)=""/181, 0xb5}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x4, &(0x7f00000048c0)=""/128, 0x80}, 0x8}], 0x7, 0x120e2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x12, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd<', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 711.528164] FAT-fs (loop5): bogus number of reserved sectors [ 711.534317] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:02 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 711.667122] FAT-fs (loop5): bogus number of reserved sectors [ 711.678168] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:03 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 711.817199] FAT-fs (loop5): bogus number of reserved sectors [ 711.823725] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 711.970313] FAT-fs (loop5): bogus number of reserved sectors [ 711.986032] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:05 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="000020a356e78ce95819a0c1363fa6966ecca35caa2f86bbfde5ceadaf72a3e5173595a24c98cd7b25ecefebb494b388b9c3ca5d2a"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x3ff}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240), 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="8e9abb38ccce64d42ecc248bb489e97c77edd93a57dcd98fbb6871fdb0041a19a6d1ba8fd7cc89b49dc2a1b4c2eaf0fb518d2a6752fec65fe4920cea284d8dc12141a0aaabcda640f9b557da5849ed1ae1885356ba11b231f57e1b34c33af7b9f274afc8d4bf67730cca643a5eba5e9db9860843390c3dac23a4e01a33a5021eae282bff0a69db75c1559f6d6a893dab2aadb9a283cb834dafced4c4434ef66fe823172613f6998909deff27b623fe5e616599fc77df4776656f68844b2eb6a85516e1b9cd3040", @ANYBLOB="f8d36964dc9e826e452ca98e1d6d5a5bc2bbad9847b5fca2042358399fe9c781cfcd9072dd84378a51a7e4cbde7e3bd423ff07d399f0c17f832398eb74c8d16eecb41061409d2da91b1c5da52e02d9c3d812d77fa5fa", @ANYRESHEX=r4], @ANYBLOB="2c053887c4705f69643d", @ANYRESDEC=0x0, @ANYBLOB="1700d146352e76b02ade8bef5a904f618a44f3367bc047510fec18cc049ab63d9a57070000008e49f80ebec877dad9eb4ab053e69a8d85987579d3d496b6e07a145944049b5a6ba7b79e8c87afc3a7c89c31478ebb7ce85cbd7d0e92e11ca8f852f70817d7131666d189e54306ff48a3236fb3e2a05a2fccfb7331eb45fc69"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise='dont_appraise'}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, 'fd'}}, {@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vmnet0'}}, {@dont_hash='dont_hash'}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x3b, @multicast2, 0x4e24, 0x1, 'nq\x00', 0x0, 0x3, 0x3f}, 0x2c) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:05 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 714.559223] overlayfs: invalid redirect () [ 714.562658] FAT-fs (loop5): bogus number of reserved sectors [ 714.582371] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:06 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 714.743758] overlayfs: invalid redirect () [ 714.760864] FAT-fs (loop5): bogus number of reserved sectors [ 714.767281] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 714.903980] overlayfs: invalid redirect () 03:39:06 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 714.954950] FAT-fs (loop5): bogus number of reserved sectors [ 714.961043] FAT-fs (loop5): Can't find a valid FAT filesystem [ 715.048751] overlayfs: invalid redirect (./file0) 03:39:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e66615100", 0xc}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:08 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:08 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x4b, 0x1, 0x4, 0x10001, 0x0, 0x10003, 0x2, 0xff}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030303030303030373b347530303030303030d6bdb9012c757365725e69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="e977be19942b2c006fc2de7166ea32843cef8a719eb4817110ae400bcbcd1885be0304c443ab3d0c533f8f387d056fb9c77b1c6929224aff21b1631d510b12df9e851dc3d280b6bd05d183b3f4eac9ff2c73ed0259b23204144b184125be031cd2aae829b8df0d75af3123f9adbf32256812a68573a0e85db68abe11448339ea8b396320bb132e2d3dbbd65efec139580d78f621647cb5742abffd"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x17) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) creat(0x0, 0x0) 03:39:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="665eabf4643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='<\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000100), &(0x7f00000001c0)=0x4) [ 717.597207] FAT-fs (loop5): bogus number of reserved sectors [ 717.626860] FAT-fs (loop5): Can't find a valid FAT filesystem [ 717.663912] overlayfs: invalid redirect (./file0) 03:39:08 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x0, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e66615100", 0xc}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 717.820966] FAT-fs (loop5): bogus number of reserved sectors [ 717.838482] FAT-fs (loop5): Can't find a valid FAT filesystem [ 717.854462] overlayfs: invalid redirect (./file0) 03:39:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e66615100", 0xc}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:09 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 717.991659] FAT-fs (loop5): bogus number of reserved sectors [ 718.019440] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x2, 0x80, 0xfff, 0x2, 0x78, 0x100}) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200", 0x12}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:09 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 718.145050] overlayfs: invalid redirect (./file0) [ 718.196269] FAT-fs (loop5): invalid media value (0x00) [ 718.206033] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200", 0x12}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 718.310440] overlayfs: invalid redirect (./file0) [ 718.358828] FAT-fs (loop5): invalid media value (0x00) [ 718.367504] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:09 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x800, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x6}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f200000000000000"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200", 0x12}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 718.529288] overlayfs: invalid redirect (./file0) [ 718.564878] FAT-fs (loop5): invalid media value (0x00) [ 718.576117] FAT-fs (loop5): Can't find a valid FAT filesystem [ 719.194081] NOHZ: local_softirq_pending 08 [ 719.198431] NOHZ: local_softirq_pending 08 03:39:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:12 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400", 0x15}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x10, 0x3, 0x1000, 0x0, 0x0, 0x37, 0x9}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x29, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i*8', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:12 executing program 2: prlimit64(0x0, 0x3, &(0x7f0000000280)={0xfffffffffffffffe, 0x5}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@any, 0xe7}) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:12 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 720.803488] FAT-fs (loop5): invalid media value (0x00) [ 720.809330] overlayfs: invalid redirect (./file0) [ 720.837200] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400", 0x15}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:12 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400", 0x15}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 721.014868] overlayfs: invalid redirect (./file0) [ 721.034030] FAT-fs (loop5): invalid media value (0x00) [ 721.039536] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:12 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 721.164772] overlayfs: invalid redirect (./file0) [ 721.266378] FAT-fs (loop5): invalid media value (0x00) 03:39:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f8", 0x16}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 721.295551] FAT-fs (loop5): Can't find a valid FAT filesystem [ 721.391516] overlayfs: invalid redirect (./file0) [ 721.407087] FAT-fs (loop5): count of clusters too big (4294966676) [ 721.415254] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d983e3a3c30303030303030303030fffffffffffffffc30303030232c757365177c69643d", @ANYRESDEC=0x0, @ANYBLOB=',gro}p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3c00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:15 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f8", 0x16}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r2, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)='fuse\x00', 0x5, 0x2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4f67090000000000000097da2fbd05e5b050aae2e332751f3ebaae0842528d2934e5bc1fb96a730daa9a4446839233492348687b7685eedb43d9a165fbc44d67fe98658cf3eb047aecfb855fd16add798554c5862bf6a409d262c16cc2a731a781f981d4f6952a708ee5f6ffc0bfcd34fde4faf3860e1f9138e925ee1b0a70d8c377f9276082a003000000e701d5e815dc37025c96b729eb2df9f44115dcdfa585945b64c13364bb17d307244e0fa50d877303d0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42304012}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4bb0000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fbdbdf25060000000d00010073797374656d234000000000"], 0x24}}, 0x20044080) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x20, 0x1, 'posix_acl_accesstrusted.em0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:15 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 723.853062] overlayfs: invalid redirect (./file0) [ 723.868282] FAT-fs (loop5): count of clusters too big (4294966676) [ 723.883662] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f8", 0x16}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x89}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 724.225558] overlayfs: invalid redirect (./file0) 03:39:15 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 724.300290] FAT-fs (loop5): count of clusters too big (4294966676) [ 724.338119] FAT-fs (loop5): Can't find a valid FAT filesystem 03:39:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 724.593577] overlayfs: invalid redirect (./file0) 03:39:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x9, 0x0, 0x10000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x10140, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="96ffffff1450d4a1e5b85dc583043acf815750d19aa897b0732137fd4733699dc42bcb6e097a17a6121d57e38b2d824df7965dd233325175c7c55fd4fe"]) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c72cb6f6f746d6f64653d303030303030303030303030303030302c757365725f69643dfa3712c33fe5", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:16 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:16 executing program 2: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x6, 0x410a, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x1f, 0x10001}, 0x0, 0x1ff, 0x40, 0x3, 0x2000000, 0x5, 0xfffa}, 0x0, 0xe, r5, 0xa) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id<', @ANYRESDEC=0x0, @ANYBLOB="0100"]) 03:39:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 724.823526] overlayfs: invalid redirect (./file0) 03:39:16 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0xb2ba9903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643db55b6c9b1ed309240e59ef647d174d56d4633a1ef189b024e426c557f9594e826b0fb71eeea7b1314abb65de5cda8b2206a8e64246743b6b4f07d80ecc", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:16 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:16 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, 0x0, &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:16 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffefd, 0x0, @perf_config_ext={0xfc, 0x9e}, 0x100, 0x9e, 0x0, 0x8, 0x953, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c047424e46c61c70deb732046e023f41c0e87bf7aa85d20337e78b88a4fa77be132db6fa428e8c4c4f8e2334cd9"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x41) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000440)={{0x8, 0x1, 0x101, 0x0, 'syz0\x00', 0x7}, 0x1, [0x5, 0x8608, 0x7, 0x100, 0x3, 0x0, 0x100000001, 0x2, 0xe955, 0x9, 0x7, 0x20, 0x0, 0x4fed0577, 0x2, 0x6, 0x1, 0x5, 0x4, 0x6, 0x286, 0x6, 0x80000001, 0x400, 0x8, 0x7ce2, 0xd5, 0x7, 0x2, 0x101, 0xa0c, 0x8, 0x2b2b, 0x585, 0xb26e, 0x7fff, 0xc94, 0x8, 0x612, 0xffffffffffffff80, 0x9, 0x5896, 0x9, 0x2, 0x1, 0x3, 0x3, 0x0, 0xffffffffffffff81, 0x2, 0x1, 0x1, 0x3, 0x1f, 0x6, 0x7, 0x1, 0xffff, 0x3, 0x8, 0x5, 0x9, 0x12c, 0x1, 0x0, 0x3, 0x5, 0x6, 0x6bab, 0x7ff, 0x73, 0x3, 0x8, 0x401, 0x7, 0x9, 0x10001, 0x6, 0xfff, 0x101, 0x5, 0x6, 0x3f, 0x1000, 0x7cc, 0x8, 0xff, 0x7, 0x6, 0x3, 0xffffffffffffffe1, 0x89fd, 0x0, 0x81, 0x0, 0x3, 0x5, 0x41b, 0x2, 0x3, 0xffffffff, 0x200, 0xffffffffffffffe1, 0xffffffffffff0000, 0xfffffffffffffff8, 0x400, 0xff, 0x8001, 0x80000001, 0x1, 0x80000001, 0x1, 0x6, 0x6, 0x200, 0x80, 0x2, 0x809, 0x7, 0x6, 0x3, 0x0, 0x100000001, 0x5, 0x9, 0x10001, 0x9, 0x6]}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030ab2bde0356ef8fe330302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',grof\x00\x00id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:16 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 725.584222] ptrace attach of "/root/syz-executor.4"[29749] was attempted by "/root/syz-executor.4"[29750] 03:39:16 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, 0x0, &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, 0x0, &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66643ddac6cf31a37b6883f4b1fa86f428d6347f6710eeaa8704ad8bd0f73b25226fcbb4ec337b7e00dbe34987b3640e1dd516d4e6a83c405229814957", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 725.874018] ptrace attach of "/root/syz-executor.4"[29774] was attempted by "/root/syz-executor.4"[29775] 03:39:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x4) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f71705fd7f53d4af1ddf191a776d4bfe1a3226ad5b0916dd44d7dd6", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x100042, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, 'user@/(cgroup'}}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64=r4, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0], @ANYRESHEX=0x0, @ANYRES64, @ANYRES64], @ANYRES16=r0], 0x12) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(0x0, 0x0) 03:39:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x11, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000140)="302c097e0cd279f205e55edda54ed7", 0xf) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400000ff, 0x9e}, 0x0, 0x9e, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303030303030302c757365725f69643d237ec8136b358a6d32d1a7fc13090074a17f730f1fc97fdee3f8387adbc4a9a7fe247005000000ff070000e05b60faf7dada596c86296fb5fecc202aab31822b951e1516329b9aa4edd14bb0ca3bd61476733822e829c18b79da715ff0423bebaea0cbef184517e623f97f99a65c90f0dfa2c3bcb915ffa7c507b5bfc6ff8e2e6d8420b446102f56fb1f5d2c015a53ddee9e17a4b83aa0344d1eca6c364db19cdfd71355b7269a4db40295059019979108410ef633", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='B\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)="2d2667da7c4017051dc877beb0053c42af", &(0x7f00000001c0)=""/5, 0x4}, 0x20) 03:39:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(0x0, 0x0) 03:39:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) getpid() r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(0x0, 0x0) 03:39:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x80000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="004b0f0b37231418d8b6b1fa1d9fb5", 0x50}, {&(0x7f0000000600)="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", 0x50}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x41, 0x0, 0x7, 0x3, 0x0, 0x8, 0x40000200, 0xfffffffd}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d009aa4000000000000b64738c5300798d4dc6341010d4bd2c4653d39d4dcd8e76e0dc813076d110bc774b86a72cfe4231a985a2c306df503c532a783765a1345b999007ce37988460b344f80e5f6ab8d7166b2df7e34836bc096fa9f7b0a087bb45e3c49c6132879199b6ffc9126648462c0910834bf254f0427cff840004ecc87b2df27aa11bcf52f756b70b2ef4683bcbd1a04e4e17c094657a7a452575e14ff3307ae3abeba218d8f421c72bd9dcbf6194bd9085f87bfc3aacbc09a81b8f77e1ab881eb71ac7d4cdc360300000078", @ANYRESDEC=0x0, @ANYBLOB="07d1cbf0c5feacf80b94087d27e318192f23ee9692dbae8c8ea784dbce1618b9adecd478a12368af302d0d6fbb1d87192ba951e7fbb744d938ffdb1c5bf8608e6b3786905632cd78fe1d5dc9aad1b6abd7c8b0e264c5e6895813e6aa98963c358390c33ca5b39dc2fc9740bd31114ebeb5ec4431dd734216c19a76d5fce5a8dc2446a96763ea0e2fbe4ce4bb56fe2904bb2e0655c8e1b126734f4f1a224727afbe35007c49bfc7c26d2794dc4b670e2600e04846022c237a8daa1dd233f27d1a91b98c68765067310c06f8da9c9f2afce396f56c9aaf57d9bfd2b040dab8146045c80ecb7effd8"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) [ 726.774429] overlayfs: missing 'lowerdir' 03:39:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 727.204992] overlayfs: missing 'lowerdir' 03:39:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff76493c33707953441f66643d", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="957d"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x2d4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r7, @ANYBLOB="00000000f0ffffff"], 0x3}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:39:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0xfffffffffffffffc, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x80000, &(0x7f0000000300)=ANY=[@ANYBLOB="5a386edb2a038d25fce22b8c3b50998051b52be1781c2640a0770d22f8e4cd8b7f19e13cc3d9de2cdf54b6e3ad3b49a2c2d8fdd12854", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c4dba7735931c6ab46ee585d0459bd76e91e499933981ba7dc3d513e45f88efc2c53652f3a09143a636db787550ecb906004f909f8d52ef8cac6b1a205c65d341a360745676646a9d192d32a7c7b79ea71e1eace6189d0297cd097683d46c19932dbf3eed7c67ad41a680d8939b31adb2c1f8c38e85175fec2b11431406491844163f8eed4b869d610f8f0d9df56646f35961b0bee2c253746d674958b2cf20b3589983680d5e5fbac22748adcf6413fd2ac13cec6085e1b0562bddc3564633c8b18eb3af099c7a8f4c4853993218c811f4547ee55ada77840b5787"]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) 03:39:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 727.449163] overlayfs: missing 'lowerdir' [ 727.461852] selinux_nlmsg_perm: 612 callbacks suppressed [ 727.461867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.489028] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.5'. 03:39:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 727.498800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.504284] overlayfs: missing 'lowerdir' 03:39:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0008009d78465730ef3cc8994360714082b0f89d8096f511b7053665413245338691677293732e90eb2387682dbf1f97e9e8a4d30f616d895d7bd64cca4ffc856ed8c0cc71449619663f4991bbada21c0fb04b9403863667069c98af2c23c33b79a8b71137309a3c6c7fb55fb89baaa925765ae69334c3b9996ec9b75c3cd79f42f190f63a7ff5be68", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 727.538427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.563308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 03:39:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 727.613399] overlayfs: missing 'lowerdir' [ 727.618096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.641775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.667207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.679923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.693080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 03:39:19 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 727.706317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29875 comm=syz-executor.5 [ 727.734509] overlayfs: missing 'lowerdir' [ 727.855937] overlayfs: missing 'lowerdir' 03:39:19 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0xb243c81bd07b0b, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) [ 727.975294] overlayfs: missing 'lowerdir' [ 728.296866] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.5'. 03:39:19 executing program 5: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW(r2, 0x5441, 0x0) 03:39:19 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x3}, 0xffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x80200) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f00000000c0)) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 728.474205] overlayfs: missing 'lowerdir' 03:39:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x11, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67725f694b3299643d", @ANYRESDEC=0x0, @ANYBLOB="d45883c9bde77df960084ee2b09ad400cf40e159093957509df4337ffaa98e7dbc7661f95a474d6381e5e84d0777"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:21 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="807cf024106db78629893e5d014a10a8ca02f85444a32e0beb885b6a45da055831df238b31b9261261a1f919", 0x2c}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x987d3f86edba42ac, 0x40010, r4, 0x2000) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="66643d92f391f1a4242985c5398aa1eef6cdb01874bcdd027e2653d612325c8038568f8cb379ffffac37a69816a3c99d065c6da0da80a45ecbf65386040fc3d16b24feb2511471f7d045b9cf48a12ea7743011c8f46424d4e8cc153c550b9fcfc15b346683723fcb280c700408f784225d697bece4f124dd74c5764d0e1f4db5e1856246b9bf15f40021eea32f9deb2d5215ef07d2025600295d88c724ef0baa8653ecccebdde28df4f31a0000d71f080bd2ae44", @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="8014f90e92f0ee5bf12b6d835d89090fa47a5819838b4d9b675e139fed427e92564b0e861fe7d826a1e9649ad3905478e7e945c546ada2331befcf38c9d22c1d3b90187edff608e6ee4ecfdd064c70cebbca398a14b06063f1876c03f3849dc55ef18aa245512bd13d0e58097161d3d5f91519e23c77a477293aed706a86d91a4712ffc27dc8d9fb4f60f0bca90c"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000445fa9663b218ebd0ca293000000f86033713f8aca920000000000000000000000000000000000000000000000002f000000000000000000000000000000000000000000000000000000000000000000000000000000bcd398012b7f1e5ffc4051f97c09bcdcdf28499cd80116897620d949378695603e3397f698c56224d7e132eef24e552ce6ab12b12ef8fe8a3ce9d1b45b3f470cb9462ba0a05a38395bbfe5dea09b739ccaf3c3372bab2fcdfc88d6343492f1fe6b"]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:21 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x30, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 03:39:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='f@\x00', @ANYRESHEX=r2, @ANYBLOB="22ca9bcb746d6f64613d30303030303030303030303030303030303030303030300b4cbdb8262c750165725f69643daf96dbaa", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:21 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 730.480010] overlayfs: unrecognized mount option "lowerdir" or missing value 03:39:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:21 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 730.540461] overlayfs: unrecognized mount option "lowerdir" or missing value 03:39:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x1000000000000000}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0100"]) 03:39:21 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 730.597261] overlayfs: unrecognized mount option "lowerdir" or missing value 03:39:21 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 730.678302] overlayfs: failed to resolve 'f': -2 03:39:22 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 730.729283] overlayfs: failed to resolve 'f': -2 [ 730.789191] overlayfs: failed to resolve 'f': -2 03:39:22 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000\a\x0000000,user_id=\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2c67ff07180083b1e0972e1278c095d88a5bfa04b582b4a260b0e567823f20f0fcd5a1b2b37950808a9adcd497a5bb552ad81069355004f4f06fc75697ea6b47b778a31c2185689231076c1b283d86ff5a827a", @ANYRESDEC=0x0, @ANYBLOB="f7291a2c00e05d6e41190b"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fe=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) [ 730.954124] overlayfs: failed to resolve 'fil': -2 03:39:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x8, 0x4, 0x6}}, 0x14) 03:39:22 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pselect6(0x30, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 03:39:22 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x10a) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_ \a5', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) [ 731.379409] overlayfs: failed to resolve 'fil': -2 03:39:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x3c, 0x1, 0x0, 0x0, "fc2ffce0c40a295917362fe83c13473f46308bbd2188972681ef3a35e1edd6a3ac83ee387fb76094031dae4d1cb3ad8450d6afdcf8389305aa5db816a787ad3e"}, 0x48}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d4ea3d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6624109a784784463e9faa07e85215118d5001", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)="1dec0b764918ae913c7941b96ab84fdc5464e75878f64bbac84209845dcf9249814a7dea94abea3b710b9d3e993e53965bd162e6a4a9175d87e77c34f66d41c86870e2b15b3f955a42ff76e63a00aa9339bdd6bd46c30ccb49ad3545108ad27e6897681c7e54d2132094f6b3b1fcfd47da8b6d5391658bfaf9e91966c8be127c9eeafa6db2cb92241ac6b44025417e79741aeaefb7d686", 0x88}, {&(0x7f0000000380)="64a6de1d6ee8af3feef4e3764e85c7138de19b7518b3c6e93c0df17b43b0874c308538fddd1916607384251390bb010fc36f017c6f377e9e7ee1b14829afc299603a372ee256ca5e7b50e4b6"}, {&(0x7f00000002c0)="1f3d00995320f1c45b89f8c7882fbe8f957f2cba0848e7fa30f906e721b37d12bb1d2699ea449eb63c7d8eff299a679002534defefd26fbfeb7dfdc15e38363d8894b26629a853fd5d38ae53a7343f8ed9dfc9070cd0b81bfdabef143318f57f6c43461e96d64188ba8c4bad41b6d8af7f8a57c40c51e884e7fbf4201f16ce7ec966286e131ce2ce1ddf1b"}, {&(0x7f0000000400)="06266fcd393305eeb3c0bd25ba7666b124f1916a236764aad641d047092933c62d69b5eeb3067b21744cef49e4d846becc564bf6299cbcc5e8296ef2989c8eb930f5393557d4fd1e7fc43271c4fa53a5bff57bc5440ba16ccacdf4b35c2ed6408053012d0803d6042f015f50ccf5eeec"}], 0x1, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x3, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) 03:39:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 733.619562] overlayfs: failed to resolve 'fil': -2 03:39:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x103) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x300000000000000}}], 0x300, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(0xffffffffffffffff, &(0x7f0000000100), 0x34000) [ 733.653376] overlayfs: failed to resolve 'file': -2 [ 733.804893] overlayfs: failed to resolve 'file': -2 03:39:25 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:25 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(0x0, 0x0, 0x0) [ 734.027220] overlayfs: failed to resolve 'file': -2 03:39:25 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(0x0, 0x0, 0x0) 03:39:27 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(0x0, 0x0, 0x0) 03:39:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:27 executing program 5: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 03:39:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@uid_gt={'uid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000100)=0xe4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x102) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="942e3300e8e59ca635f6874c5961f0dc6fb22272389e17e8b515a4ae48a714dfb66d25d6877a9d101a16824fb36edeaf1ac58808746d360a2271eeb6a0de82289449bc69e33ae3e45f7e91064599831a3383a95b30d6e1218bb33265f947eff9aa4e71c336348e7f2d4bc74e5ff8526d482c16afc9bceb2e8ac29dd2aedada22bfd1115cf1ea7d3cbc4da2ae9cf77a9c350dc10924d30644b8605465c7661ddc2f9bddb0af4ad1feb89e4ffc178133e104604e7aee4f4a0e6d9a4e", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x613) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c7570cb016401", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r2, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)='fuse\x00', 0x5, 0x2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4f67090000000000000097da2fbd05e5b050aae2e332751f3ebaae0842528d2934e5bc1fb96a730daa9a4446839233492348687b7685eedb43d9a165fbc44d67fe98658cf3eb047aecfb855fd16add798554c5862bf6a409d262c16cc2a731a781f981d4f6952a708ee5f6ffc0bfcd34fde4faf3860e1f9138e925ee1b0a70d8c377f9276082a003000000e701d5e815dc37025c96b729eb2df9f44115dcdfa585945b64c13364bb17d307244e0fa50d877303d0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d983e3a3c30303030303030303030fffffffffffffffc30303030232c757365177c69643d", @ANYRESDEC=0x0, @ANYBLOB=',gro}p_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3c00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2aa9048, 0x0) 03:39:28 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 737.398396] overlayfs: invalid redirect (./file0) 03:39:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:28 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 737.650399] overlayfs: invalid redirect (./file0) 03:39:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="000020a356e78ce95819a0c1363fa6966ecca35caa2f86bbfde5ceadaf72a3e5173595a24c98cd7b25ecefebb494b388b9c3ca5d2a"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x804000) recvmmsg(r1, &(0x7f0000008880), 0x0, 0xf2aa8d4065aae5a8, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000940)='fuse\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='d\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',obj_user=user_id,\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x1, &(0x7f0000000100), 0x8, 0xffffffffffffffff, 0x1}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030302c75f47365725f49643d00000000000000", @ANYRESDEC=0x0, @ANYBLOB="2c67d827fc9b92eaab04", @ANYRESDEC=r0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f00000002c0)="5f40b14c5dba61e3b061acc2c7338addf01281790ec2830c34f6e0f1557a711d507f1842e22391288a238db3db9960c252149d2a290f45c27cc88c24c69a68ff0ec987cb5bae0a884b56a83c77464f0f0b94c7f549de7ad2df441a0715fd123f83ebeb17e82bdde72b3aa8c09e0ef361293657f46a37cc70fc4fa95aad8969fa70254cfeccc1a65cc679eb4df1ee981fbf50388744187bd5b493b59216dc266f795c1f1dc339140c2ebfa380666afe54194442ad165bb2768eb34001b19dfe0890e88146325f8300d65b9be5bca7d8d2bbd432", 0xd3}, {&(0x7f00000000c0)="c574b953573ef4c4b578cd78a6f006f10bb028835c4a13bc2bfbddf6301cf35052fa11cfe6ff332253b3f86dcc15ee302807d6c2c39801f4fd337f91468f", 0x3e}, {&(0x7f0000000440)="40b600ca91b538e4dec5509da3868d0b1f584ffa1cf291a33b3314361b29776f692bb17d617b86afe9ceae0c74046ef253395e2ecbe2cf374b7eececaa1295326e5db2b9248bd68b127e7d8a34103e853c3b3082ddbb52d88e2804f59891232808a52a205568dc730d5db18921f4007bc3c94721273a3436ebdd9e8f846309e9068ec608b48386d44576d3fe85f2441153823f9ab2d4b79de64ff7a4fe13db6299627d13ae4498d49d395f87279855850b0079934673210eaf383d64b549ee51f200ca1a0bd50b79ed7b111ac836a958909af0c68452aa8eb18f307f09a2", 0xde}, {&(0x7f0000000540)="7e6f3b2ac4f455acf67727379262ee437dc5922e1dc032fd75f7150e0820922b91cd6525352ac24543b1e45802d0022bfcf7ff64c26f6148a96060f3ca", 0x3d}, {&(0x7f0000000580)="a75812f50dfe8ea01845fc10e499c89514c5c1137330d4cb40dfda4bbf4ada373dfae144e335a3968b30394a657379e3cf0975805716b37c2500f798f6944bba331c21d8572d70290d4047d7bc234cb32c32defbeec89ec622fadbb3313ac3f88c566ce7c1a23444b4656aea326d91355d370280fad395dfda3dc848646c17f1979c46afafe7f720d13b0e8d29f0c28dd40a3eb2bc38fafdd49153f15f65c6825aaad340d0dd1c7ed5853b3177ef4a186bec180bfa6e2a383eb4995fe0b27e0d245082dd60781a070daf4d4342b774fd", 0xd0}, {&(0x7f0000000680)="a295c2486ef039243e9244d87df6bdc643cc1cc8c2e6f73d486d8b2169872cb321cd0efc7e1976344996c845bb7e5436f32878e72fc1505067e5d5e74b5404a325b238f96c974961ef613694d964fac5f535c6e4cd380cf4c87be851b1fa0093e338e1692228d2c06afd43b42fe49a9b2bb93bf478cdc3a47e2502b4a3092d391469fa68a33d445c704f2b8d7764aa9359829db26d742e6fe022238dfd56ba214eb7f9edb230a10f7c8065dcefe7165b8d5686e6145d6471d986eaa952211a79010288751f25c6d49fb151f967b7f460a78e304557af5eb348f2db2890c97cd20e7506c8f91d640a9f3a60f5d9de74a0", 0xf0}, {&(0x7f0000000780)="b3a10c3d3a8ca3f205014cbe025794fe5f69feb2ad611fa450d67b10cf353b696082cd7860bc931750d9f689043965dacc01004aad8736be7d2233a138892c46fc7890343e6bf2ef59dfab45d8889eb729775f4159f3cfb41365bb902e671a07e4efe3be80f4515079119ef629e2b568c45ac44e1bfce90e13e27f5f26c90dfb26add30c2ac33aff6fb027e4fe5e9b1a849ed82db76eb448d35bfc1c234612f89b81e93a54410a17c0a13c25bd078a5769f24c4f792f2bfd5acbf738fe05845a8f79e369ec74f0f948abf95d97b3a4", 0xcf}], 0x7, &(0x7f0000000980)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x6b, [@rand_addr=0x3, @rand_addr=0x74, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xdf, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x4a, [@broadcast, @rand_addr=0x1000, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x24, 0x25, 0x0, 0x8, [0x80, 0x4, 0x8, 0x0, 0x8, 0x4, 0x7fff, 0x10001]}, @generic={0x82, 0x4, "75d5"}, @lsrr={0x83, 0x13, 0x1c, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64cb]}, @rr={0x7, 0x1f, 0xda, [@multicast1, @remote, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}]}}}], 0xb8}, 0x20048019) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000a80)=0x1c, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @sco, @vsock={0x28, 0x0, 0x0, @local}, @vsock={0x28, 0x0, 0x2711}, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x9, 0xe9}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f646d6f64653d303030303c3030303030303030303030303030303030302c757365725f69643d60608d602c7eff5882623f34b9d09a54da0607d7d2b7aac19ae6d120753dd21ab0a953ce7d061bbb917bfa4de9876dc995643281fdc3f3d5314ed07df5d0d474681183392dfe", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:31 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9f16"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:31 executing program 2: prlimit64(0x0, 0x3, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'wg2\x00', 0x81}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:31 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 740.573460] overlayfs: invalid redirect (./file0) [ 740.584064] overlayfs: invalid redirect (./file0) 03:39:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:33 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) creat(0x0, 0x0) 03:39:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x94bb, 0x4) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) unshare(0x40000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b6d2"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x46) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4998980000000000007d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xc, 0x9e6, 0xec, 0xa9, "e557549cc7f12831b5f1978cce85133035ae9ca452e347b718b85066bd1f76aab8c6d30b23a6e0bf666efdedc6d7e9cc80343c9601baf4121f010e6ea8706fb1c545854702bfbf0da330b37a26cf978511119e3a32a6b21ec48f2272616c3619a05dff13204112e9f4f4b3f4442f14ab4aea8439c8ede124219df1673e01cbee3c2f1efcae3ba0adce5d0a0a8d49aeba724085b454941d5558c6e3f8f53dd8b1e3fa8b1aa77cf7b97e"}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x22041c, &(0x7f00000003c0)=ANY=[]) 03:39:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x9) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0xd4e, {0xf1d9293, 0x2, 0xc2, 0x4, 0x658, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x23}) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 742.746785] overlayfs: invalid redirect (./file0) [ 743.015121] IPVS: ftp: loaded support on port[0] = 21 03:39:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726fca9fd2abc515", @ANYRESDEC=0x0, @ANYBLOB='B\'']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',roup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x14999) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgget(0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="64653d303030303030303007000030303030302c758965725f69643d00000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x20004000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303030303030302c757365725f69643d5c53b15da72ded6278eb18cea6881267ff19540c0666074bec50", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="a0f1891e92fbd924c3da0087e125a3370970589758d2db4e03", @ANYRESDEC, @ANYRES64, @ANYRES32=r4, @ANYRESHEX], @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0059aa228684dea8b319364fa37e8305aa42a101ef683a62977d2fae660af362f48b7e7e6e535c27465871befec73840230ea03b9abad4f301aca67d88d6d83a31313ffabec1b5136df53c1497f6587dc9f6c658ae3e30b5c6fe811ef07237941806de65e648c8066c"]) 03:39:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32=0x0], @ANYBLOB="2c17"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2400dd27ab090088fa48c0922802365a"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="087fe6643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x94bb, 0x4) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) unshare(0x40000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b6d2"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',roup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(r3, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, r0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f00000003c0)="d309b34a25444b658b8b0f6091e91bda6f2bce16fa3252223dfff993fc65acdb1ccfa0abf7a8081217942fe704c5bd6346d8374ec4aaae9380f9e5e966a0e89479fd62c6e2e6306f383ae38bce72fe3764f7fed0adbbda82bdfbcb88b163534b8fd22fd0a7b500a1b34b2533cae025049febf70fb46207750ba112514b6419815fb1129439bc6abaa6", 0x89) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000002c0)=0x4) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfff, 0x9}, 0x0, 0x9e, 0x1, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xa3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x2801080, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d06ae362b1c3062b08f7c30fc9aa68c625ab261420dfeebe47440a66d8b9e15d0ae0d4f4847f5f17b117c237a867d0fb0082bc58cdeb2cf486e71369b84f0c58572d26eb25952811c4bca3ebd269c9b79b335b3702d2a6b8e071afe072328eb31a404e3bf4f7e20659265cce9d96446c8a9d4a1", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000400,allow_other,max_read=0x0000000000000800,max_read=0x0000000000000009,subj_user=\'%selinux)&wlan1,\x00']) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="2ca07763c6cbdc67016f75705f6964556e2f21800000d2953171cb1559bcf13162ccc7117c23335576e98bedd1b050fba9093cc930e1a74e4ddf2f19a47bd3ac00"/78, @ANYRESDEC=0x0, @ANYBLOB="2c73f3af51fd64c7834fac0260bc01"]) 03:39:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:37 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r0, 0x3, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0xfffff806, 0x7, 0x400, 0x9, 0x19, "094f300d0543f9c62f2df36ede920920470f35"}) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x100000000, 0x9e}, 0x0, 0x9e}, 0x0, 0xb, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 746.058317] IPVS: ftp: loaded support on port[0] = 21 03:39:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="83643d820da65be0e21ffc128ecacd8f689095c7904ac9609c7b4ad4c971e72947debd7a7291d2d49f5fc7382681eceafd7befa843fe5a41d86d83c364edb1ba9fafcd802e374c68b5f835ca3cd83a8ea8d99ba05127ef347c760abd95d6fa1aba2d3d41f5819769a3a200af3b6bffd126ce56f376f947964e0359db04420d01a6c3d801c77c4a622235264bbe4813ae52c34592e1291bcfdaa5f58a46b0af", @ANYRESHEX=r4, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="2c67ef5b75705f69643d8d0cb72f1cf790f9862e12d2e5803d926c14781887bee5053143481abd0c09e6e42cd641ea5309f29ef27a8d388e79dc0a7f2c1dafd43a8c3149a745c971a696aed9ba54f5be1a032868175cfca17658c7d689d764fd88931c9709b6e4de98a1f43b79eba351162d9475e5cae702642ebe2706adb97dc5830dc29b8914e124e540a3b6edbe39aeb06abbfcca77227fe06d2a82f7b25b6eba9405467d2a4629eaef4c7137090393b9827de3f8cadeb19de3062491e504c896ec7d9544fd4dc5218345e203e0624eb96e7b98f551635175b658af9c154ceb430a56c6022ea963e2f9", @ANYRESDEC, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getpid() ptrace$getenv(0x4201, r0, 0x8006, &(0x7f0000000100)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030cf3030303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="57c91ce1010000800000000001a1"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(r3, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, r0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000003c0)={0x9, 0x0, 0x7, {0x80000001, 0x9}, 0x200, 0x7f}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000f703200026bd7000ffdbdf2507000000070000002e2f6669070000000000000065300000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x90) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffbffffd, 0x0, @perf_config_ext={0xff, 0xa1}, 0x0, 0xa0}, 0x0, 0x3, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="2c676f280c090100000001000000ad7de7726f75705f68643d", @ANYRESDEC=r3, @ANYRESHEX=r5]) 03:39:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="83643d820da65be0e21ffc128ecacd8f689095c7904ac9609c7b4ad4c971e72947debd7a7291d2d49f5fc7382681eceafd7befa843fe5a41d86d83c364edb1ba9fafcd802e374c68b5f835ca3cd83a8ea8d99ba05127ef347c760abd95d6fa1aba2d3d41f5819769a3a200af3b6bffd126ce56f376f947964e0359db04420d01a6c3d801c77c4a622235264bbe4813ae52c34592e1291bcfdaa5f58a46b0af", @ANYRESHEX=r4, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB="2c67ef5b75705f69643d8d0cb72f1cf790f9862e12d2e5803d926c14781887bee5053143481abd0c09e6e42cd641ea5309f29ef27a8d388e79dc0a7f2c1dafd43a8c3149a745c971a696aed9ba54f5be1a032868175cfca17658c7d689d764fd88931c9709b6e4de98a1f43b79eba351162d9475e5cae702642ebe2706adb97dc5830dc29b8914e124e540a3b6edbe39aeb06abbfcca77227fe06d2a82f7b25b6eba9405467d2a4629eaef4c7137090393b9827de3f8cadeb19de3062491e504c896ec7d9544fd4dc5218345e203e0624eb96e7b98f551635175b658af9c154ceb430a56c6022ea963e2f9", @ANYRESDEC, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x0) 03:39:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20bd3def2e71e75b, 0x6, r4, &(0x7f0000000380)="e69df555d6d4efcd8fb1ea4ccf43652ccde33dbb70e5bbf12bdee086cc86f6594e73eacad2554c7683e99ec7c7d6c09e6c35187ff668994c3f27b8f96155ce3ca787f50048f7afd8a8362d6b980370cda06502c01ca247af12e6db1a5024434bcdac06a2a9cd680c2cfdcadbee3ce96b2638cff89c3d4229f4eb7e4317f2891c225dab49361a96695f845c48bb4281c1456e9ed4e82ebe1654c86523806bd9a09afad8e948a4a0b00474295e5afc3c7facfc16be0000000010688563060d3866ecfdd16d3223425a5896c2df87e8f30a", 0xd0, 0x8, 0x0, 0x3}]) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:39:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) creat(0x0, 0x104) 03:39:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f00000002c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/219, 0xdb}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000002b80)=""/235, 0xeb}, {&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000780)=""/125, 0x7d}], 0x7, &(0x7f0000001980)=""/250, 0xfa}, 0x1365}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/34, 0x22}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x3, &(0x7f0000002a80)=""/116, 0x74}, 0x8}], 0x2, 0x40000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(r1, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000p00,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) creat(0x0, 0x0) 03:39:39 executing program 5 (fault-call:6 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x80, &(0x7f00000001c0), &(0x7f00000002c0)=""/128, 0x2, 0x0, 0x3b, 0x35, &(0x7f0000000240)="b7d73583cc2625254aa7d17e57e752c193a6c7d452db6c8f484dc0d22709c6d23d05be94449366b666e15ed1e8ad1a62c8be47da673b3fdc7c21bd", &(0x7f0000000340)="d38538ad8d361b84e147381c281a48c5aee0f635d4d9181bab9e5cbc7d10e67547724703d5dc3e566cfc58beafcc0bc53bfe05084a"}, 0x40) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/15, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 748.082261] FAULT_INJECTION: forcing a failure. [ 748.082261] name failslab, interval 1, probability 0, space 0, times 0 [ 748.163566] CPU: 1 PID: 30348 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 748.171503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.180866] Call Trace: [ 748.183467] dump_stack+0x13e/0x194 [ 748.187116] should_fail.cold+0x10a/0x14b [ 748.191279] should_failslab+0xd6/0x130 [ 748.195278] kmem_cache_alloc+0x2b5/0x770 [ 748.199897] getname_flags+0xc8/0x560 [ 748.203740] do_sys_open+0x1c4/0x3f0 [ 748.207469] ? filp_open+0x60/0x60 [ 748.211012] ? SyS_clock_settime+0x1a0/0x1a0 [ 748.215599] ? do_syscall_64+0x4c/0x640 [ 748.219573] ? do_sys_open+0x3f0/0x3f0 [ 748.223463] do_syscall_64+0x1d5/0x640 [ 748.227359] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 748.232563] RIP: 0033:0x45c849 [ 748.235755] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 748.243476] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 748.250767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 748.258045] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 748.265329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 748.273556] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000000 03:39:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:40 executing program 1 (fault-call:1 fault-nth:0): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:40 executing program 3 (fault-call:7 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:40 executing program 5 (fault-call:6 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 748.954934] FAULT_INJECTION: forcing a failure. [ 748.954934] name failslab, interval 1, probability 0, space 0, times 0 [ 748.983996] FAULT_INJECTION: forcing a failure. [ 748.983996] name failslab, interval 1, probability 0, space 0, times 0 [ 748.996648] CPU: 1 PID: 30360 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 749.004568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.013928] Call Trace: [ 749.016626] dump_stack+0x13e/0x194 [ 749.020273] should_fail.cold+0x10a/0x14b [ 749.024505] should_failslab+0xd6/0x130 [ 749.028467] kmem_cache_alloc+0x2b5/0x770 [ 749.032610] getname_flags+0xc8/0x560 [ 749.036658] user_path_mountpoint_at+0x23/0x40 [ 749.041263] SyS_umount+0x10a/0x340 [ 749.044888] ? SyS_write+0x14d/0x210 [ 749.048595] ? __detach_mounts+0x2e0/0x2e0 [ 749.052820] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.057215] ? do_syscall_64+0x4c/0x640 [ 749.061180] ? __detach_mounts+0x2e0/0x2e0 [ 749.065403] do_syscall_64+0x1d5/0x640 [ 749.069279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 749.074455] RIP: 0033:0x45c849 [ 749.077633] RSP: 002b:00007fde73d8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 749.085327] RAX: ffffffffffffffda RBX: 00007fde73d906d4 RCX: 000000000045c849 [ 749.092604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 749.099999] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.107262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 749.114536] R13: 0000000000000c3c R14: 00000000004ce651 R15: 0000000000000000 [ 749.127967] FAULT_INJECTION: forcing a failure. [ 749.127967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.147812] CPU: 1 PID: 30364 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 749.155738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.165102] Call Trace: [ 749.167710] dump_stack+0x13e/0x194 [ 749.171364] should_fail.cold+0x10a/0x14b [ 749.175540] should_failslab+0xd6/0x130 [ 749.179554] kmem_cache_alloc+0x2b5/0x770 [ 749.183728] ? depot_save_stack+0x10d/0x401 [ 749.188071] get_empty_filp+0x86/0x3e0 [ 749.191973] path_openat+0x8d/0x3c50 [ 749.195865] ? __lock_acquire+0x5f7/0x4620 [ 749.200152] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 749.204871] ? __lock_is_held+0xad/0x140 [ 749.208971] do_filp_open+0x18e/0x250 [ 749.212794] ? may_open_dev+0xe0/0xe0 [ 749.216645] ? find_held_lock+0x2d/0x110 [ 749.220723] ? __alloc_fd+0x1bf/0x490 [ 749.224540] ? lock_downgrade+0x6e0/0x6e0 [ 749.228707] ? do_raw_spin_unlock+0x164/0x250 [ 749.233215] ? __alloc_fd+0x1bf/0x490 [ 749.237033] do_sys_open+0x29d/0x3f0 [ 749.240761] ? filp_open+0x60/0x60 [ 749.244322] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.248938] ? do_syscall_64+0x4c/0x640 [ 749.252924] ? do_sys_open+0x3f0/0x3f0 [ 749.256826] do_syscall_64+0x1d5/0x640 [ 749.260908] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 749.266142] RIP: 0033:0x45c849 [ 749.269357] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 749.277213] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 749.284517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 749.291967] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.299272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 749.306553] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000001 [ 749.332552] CPU: 1 PID: 30367 Comm: syz-executor.3 Not tainted 4.14.173-syzkaller #0 [ 749.340498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.349867] Call Trace: [ 749.352476] dump_stack+0x13e/0x194 [ 749.356121] should_fail.cold+0x10a/0x14b [ 749.360289] __alloc_pages_nodemask+0x1bf/0x700 [ 749.364987] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 749.370244] ? __lock_acquire+0x5f7/0x4620 [ 749.374522] ? proc_fail_nth_write+0x7b/0x180 [ 749.379052] alloc_pages_vma+0xc2/0x4a0 [ 749.383055] __handle_mm_fault+0x17b6/0x3280 [ 749.387485] ? copy_page_range+0x1d70/0x1d70 [ 749.391921] ? find_held_lock+0x2d/0x110 [ 749.396177] handle_mm_fault+0x288/0x7a0 [ 749.400273] __do_page_fault+0x4bc/0xb40 [ 749.404358] ? vmalloc_fault+0xdf0/0xdf0 [ 749.408572] ? do_page_fault+0x60/0x4f2 [ 749.412567] ? page_fault+0x2f/0x50 [ 749.416215] page_fault+0x45/0x50 [ 749.419685] RIP: 0bd0:0x4cdebc [ 749.422888] RSP: 5faa06d4:000000000076bfa0 EFLAGS: 00000006 [ 749.428551] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 [ 749.457637] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 749.465268] CPU: 1 PID: 30367 Comm: syz-executor.3 Not tainted 4.14.173-syzkaller #0 [ 749.473180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.482560] Call Trace: [ 749.485151] dump_stack+0x13e/0x194 [ 749.488797] dump_header+0x178/0x6d4 [ 749.492515] ? _raw_spin_unlock_irqrestore+0xb7/0xe0 [ 749.497879] ? ___ratelimit+0x50/0x519 [ 749.501794] oom_kill_process.cold+0x10/0xae3 [ 749.506304] ? lock_acquire+0x170/0x3f0 [ 749.510268] ? lock_downgrade+0x6e0/0x6e0 [ 749.514438] out_of_memory+0x2d5/0x1110 [ 749.518402] ? oom_killer_disable+0x1c0/0x1c0 [ 749.522888] ? mutex_trylock+0x152/0x1a0 [ 749.526935] ? pagefault_out_of_memory+0xaa/0xc9 [ 749.531679] pagefault_out_of_memory+0xbb/0xc9 [ 749.536245] ? out_of_memory+0x1110/0x1110 [ 749.540466] ? lock_downgrade+0x6e0/0x6e0 [ 749.544610] mm_fault_error+0xad/0x2b0 [ 749.548495] __do_page_fault+0xa07/0xb40 [ 749.552554] ? vmalloc_fault+0xdf0/0xdf0 03:39:40 executing program 1 (fault-call:1 fault-nth:1): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 749.556611] ? do_page_fault+0x60/0x4f2 [ 749.560572] ? page_fault+0x2f/0x50 [ 749.564357] page_fault+0x45/0x50 [ 749.567815] RIP: 0bd0:0x4cdebc 03:39:40 executing program 5 (fault-call:6 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 749.570997] RSP: 5faa06d4:000000000076bfa0 EFLAGS: 00000006 [ 749.656450] FAULT_INJECTION: forcing a failure. [ 749.656450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.674117] CPU: 1 PID: 30371 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 749.682010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 749.691407] Call Trace: [ 749.694026] dump_stack+0x13e/0x194 [ 749.697689] should_fail.cold+0x10a/0x14b [ 749.701874] __alloc_pages_nodemask+0x1bf/0x700 [ 749.706571] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 749.711605] ? find_held_lock+0x2d/0x110 [ 749.715692] cache_grow_begin+0x7b/0x410 [ 749.719777] kmem_cache_alloc+0x695/0x770 [ 749.723952] getname_flags+0xc8/0x560 [ 749.727771] user_path_mountpoint_at+0x23/0x40 [ 749.732371] SyS_umount+0x10a/0x340 [ 749.736125] ? SyS_write+0x14d/0x210 [ 749.739861] ? __detach_mounts+0x2e0/0x2e0 [ 749.744139] ? SyS_clock_settime+0x1a0/0x1a0 [ 749.748575] ? do_syscall_64+0x4c/0x640 [ 749.752570] ? __detach_mounts+0x2e0/0x2e0 [ 749.756842] do_syscall_64+0x1d5/0x640 [ 749.760788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 749.765993] RIP: 0033:0x45c849 [ 749.769190] RSP: 002b:00007fde73d8fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 749.777345] RAX: ffffffffffffffda RBX: 00007fde73d906d4 RCX: 000000000045c849 [ 749.784630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 749.791917] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 749.799222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 749.806506] R13: 0000000000000c3c R14: 00000000004ce651 R15: 0000000000000001 [ 749.874003] Mem-Info: [ 749.879983] active_anon:323794 inactive_anon:5756 isolated_anon:0 [ 749.879983] active_file:18604 inactive_file:12634 isolated_file:0 [ 749.879983] unevictable:3584 dirty:211 writeback:0 unstable:0 [ 749.879983] slab_reclaimable:14620 slab_unreclaimable:117368 [ 749.879983] mapped:60832 shmem:247 pagetables:3522 bounce:0 [ 749.879983] free:1029088 free_pcp:188 free_cma:0 [ 749.905626] FAULT_INJECTION: forcing a failure. 03:39:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x7, &(0x7f0000000900)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000000980)="6503c5fb094e06d750f3ed72c6089b5369177b354f278f93624548191e092677204e76b8e96422f4755baac423e97993e650e9045e1cf96cf34545c5994943aa512c44a4f03dfe4cf4fc49dfb2964950147395c4d5ebff7f000000000000cec86a66033d2dc91cda1e63b03b8ebabe56dc2bc99dcde20e56ddfdf46614e9a710960aef8bfe9e38c20390bab3d6656cd4e2140028c510e5b08a7027a3355108ba21545b4e5b26853b2ef4feec8c2d2b28fb", 0xb1, 0x7fffffff, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="becdf988e28919ced21ca0870886175d6d94ef31fece6d6b1406605f9e3cf493245a64375732f246ecef6bad24cd23e163aa1a625dc37a58eb40c98ee69da669851794d1d8bc6995d8406a7f7116ccb944ae9ed71f49692cd43270504dc41fbd84eae680ad736b6c9238a3266f", 0x6d, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x40, r1, &(0x7f0000000480)="a0479179d8626926ce82a5404b7a1db282ff0ef860f3ea8001a55e2148aedc4f72866ac63246d791e65457a9971996483d536f07f77a0dd9ec2304e493b5c6e597fe4a30d5c127eaa80f4f2d0d35737fb562c570cd99fa55a4a84145191e78d04e7e7f44d3f6a257f1897e171eb9af002a3a783dc2f805c9132c7be27c34d05ff87b465b18def7351edfdced192b9042a4aed57ebbc239114156b0e314f85d43d1e4b4b53d60bfb1a6443c2dc57693d129606b26bf66f076699eae5738fe600b2fe84a56b0dada7c191a98b56a07e563c6bd51b446b06749ca024583d34f0ae1535de7c885cd6677a32627af5602a6b5", 0xf0, 0xfffffffffffffff9, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0xffff, 0xffffffffffffffff, &(0x7f00000005c0)="62c60a3fc7d0abee612b5bbdfddc5e6eba3252d8bed951f895c76365e5b4901e38689ec94463e78966f18de29df7e7a7c09d7c10ce858271d054443e627c51e55501c6b61ff9aff02ca1b0b40587004a8a70818eaffc07b0b152daf24e5a8bf009bb6fdf4c56ec3f87e9b1d82f10f5d8ac9bf894638dabc796fddea4a6f89a9557", 0x81, 0x0, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x4000, 0xffffffffffffffff, &(0x7f00000006c0)="d0f16222d0a32274f1a53c31955f1ff2a2b898c059a87ec6f4117ec707f2333838b6c97edaa44593a79777d50c3f47944b29f1c822cbf47453d269ceb8dae4b0ea7f8edc2c6d0ea5cb33c057b707ad0c6a6d658cc8d1d2c851271d07988dede8ce222218e715d14cf84274c5dd43166642f502c4fba91cf55aeea47363a9ecc0c93b90703c5e413d3d2cc7758db50adaa4ec8e51f5c3fa76d6158ed9b60e51d6e44e518b46e6b6e7a534528bc20c6857b70a97ceadbb890c04ef081a45cf5e42a69a3cc4911d8a306a76575e867d6a7a3f98be", 0xd3, 0x7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000000a40)="7e23d471bf9845c826bb3ccb096eff9be645da6e35930a6d6877d3edf482dc2dc3fe4696949a022094de9f0b13698e6d787abbe2f1e706097a200029d9a4f2e94c858fbf2d7036588c78739eb26ce16aace2ed4b128b8c4ce84559be6a070c1c73c2538e8d83585cb87900bda5fd7ddb5edbad129af93eb5451928706fc8b5038e823b", 0x83, 0x9bb2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x3f, r1, &(0x7f0000000880)="51f98aba0daf9fce6cb568f80b7e1296c4fd0ad9446d37cfdee67255e6", 0x1d, 0x5, 0x0, 0x2}]) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00dae3b6fddf6cb10647be921f17a278c3e5000000000000000000"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 749.905626] name failslab, interval 1, probability 0, space 0, times 0 [ 749.969290] Node 0 active_anon:1298100kB inactive_anon:23024kB active_file:74272kB inactive_file:50536kB unevictable:14336kB isolated(anon):0kB isolated(file):0kB mapped:243328kB dirty:840kB writeback:0kB shmem:988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 428032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 749.986236] CPU: 0 PID: 30374 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 750.006373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.015882] Call Trace: [ 750.018498] dump_stack+0x13e/0x194 [ 750.022155] should_fail.cold+0x10a/0x14b [ 750.026329] should_failslab+0xd6/0x130 [ 750.030320] kmem_cache_alloc+0x2b5/0x770 [ 750.032772] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 750.034478] ? depot_save_stack+0x10d/0x401 [ 750.034496] get_empty_filp+0x86/0x3e0 [ 750.034507] path_openat+0x8d/0x3c50 [ 750.034521] ? __lock_acquire+0x5f7/0x4620 [ 750.076466] ? trace_hardirqs_on+0x10/0x10 [ 750.080728] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 750.085424] ? __lock_is_held+0xad/0x140 [ 750.089531] do_filp_open+0x18e/0x250 [ 750.093367] ? may_open_dev+0xe0/0xe0 [ 750.097198] ? find_held_lock+0x2d/0x110 [ 750.098672] Node 0 [ 750.101288] ? __alloc_fd+0x1bf/0x490 [ 750.101304] ? lock_downgrade+0x6e0/0x6e0 [ 750.101317] ? do_raw_spin_unlock+0x164/0x250 [ 750.101329] ? __alloc_fd+0x1bf/0x490 [ 750.101346] do_sys_open+0x29d/0x3f0 [ 750.101375] ? filp_open+0x60/0x60 [ 750.101387] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.101397] ? do_syscall_64+0x4c/0x640 [ 750.101404] ? do_sys_open+0x3f0/0x3f0 [ 750.101413] do_syscall_64+0x1d5/0x640 [ 750.101428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 750.101437] RIP: 0033:0x45c849 [ 750.101441] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 750.101451] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 750.101455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 750.101464] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 750.106163] DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.107510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 750.107518] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000002 [ 750.225967] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 750.231190] Node 0 DMA32 free:313068kB min:36272kB low:45340kB high:54408kB active_anon:1300268kB inactive_anon:23028kB active_file:74272kB inactive_file:50580kB unevictable:14336kB writepending:892kB present:3129332kB managed:2621272kB mlocked:14336kB kernel_stack:10368kB pagetables:14236kB bounce:0kB free_pcp:816kB local_pcp:248kB free_cma:0kB [ 750.262116] lowmem_reserve[]: 0 0 0 0 0 [ 750.276122] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 03:39:41 executing program 1 (fault-call:1 fault-nth:2): syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 750.400584] lowmem_reserve[]: 0 0 0 0 0 [ 750.417982] Node 1 Normal free:3783468kB min:53612kB low:67012kB high:80412kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 03:39:41 executing program 5 (fault-call:6 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb7c906d6b66732e666151000204011a0200027404f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="43372ce7ffffff000000000200000081"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r0, 0x42, 0x7b}, 0x0, &(0x7f0000000280)="d28a44bb9f2230208451a58ff267e023bf5479be5f100c65e4ebceb94521bc68eeed4af57e5b7a7ace53851824288259af86373b396253462f3fffa202639a69a2a4", &(0x7f0000000300)=""/123) add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="560eaf299b3db1e945b409332b59249e0d52ad47ccd65585d389e694066fb3baf877671c640b2f09640847452a34666a085810a816a289e9ff5e71ca89323475acc9d35745a824b4221dbd8f032c220ad09e914ffdb2b356c9174b38057745d683", 0x61, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000003c0)={0x1ff, 0xffffffc0, 0x900000, 0x401, 0x1, "fb31c110557243ce7931ff7c9c56faddadb8f8"}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4600, 0xc2) [ 750.550659] lowmem_reserve[]: 0 0 0 0 0 [ 750.554716] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 03:39:41 executing program 0: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) sendmsg$netlink(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000000000001f92e0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800c0da55450617d626000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x38}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 750.620748] Node 0 DMA32: 445*4kB (UE) 283*8kB (UME) 17*16kB (UE) 1197*32kB (UME) 1064*64kB (UME) 191*128kB (M) 62*256kB (UME) 22*512kB (UM) 13*1024kB (UM) 6*2048kB (UME) 32*4096kB (UM) = 318972kB [ 750.677493] FAULT_INJECTION: forcing a failure. [ 750.677493] name failslab, interval 1, probability 0, space 0, times 0 [ 750.677506] CPU: 0 PID: 30387 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 750.677512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.677516] Call Trace: [ 750.677533] dump_stack+0x13e/0x194 [ 750.677551] should_fail.cold+0x10a/0x14b [ 750.677567] should_failslab+0xd6/0x130 [ 750.677578] kmem_cache_alloc+0x2b5/0x770 [ 750.677590] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 750.677601] ? rcu_read_lock_sched_held+0x10a/0x130 [ 750.677615] selinux_file_alloc_security+0xaf/0x190 [ 750.677626] security_file_alloc+0x66/0xa0 [ 750.677635] ? selinux_is_enabled+0x5/0x50 [ 750.677645] get_empty_filp+0x15c/0x3e0 [ 750.677655] path_openat+0x8d/0x3c50 [ 750.677668] ? __lock_acquire+0x5f7/0x4620 [ 750.677680] ? trace_hardirqs_on+0x10/0x10 [ 750.677694] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 750.677707] ? __lock_is_held+0xad/0x140 [ 750.677720] do_filp_open+0x18e/0x250 [ 750.677730] ? may_open_dev+0xe0/0xe0 [ 750.677739] ? find_held_lock+0x2d/0x110 [ 750.677749] ? __alloc_fd+0x1bf/0x490 [ 750.677764] ? lock_downgrade+0x6e0/0x6e0 [ 750.677776] ? do_raw_spin_unlock+0x164/0x250 [ 750.677797] ? __alloc_fd+0x1bf/0x490 [ 750.677816] do_sys_open+0x29d/0x3f0 [ 750.677828] ? filp_open+0x60/0x60 [ 750.677842] ? SyS_clock_settime+0x1a0/0x1a0 [ 750.677852] ? do_syscall_64+0x4c/0x640 [ 750.677861] ? do_sys_open+0x3f0/0x3f0 [ 750.677871] do_syscall_64+0x1d5/0x640 [ 750.677885] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 750.677893] RIP: 0033:0x45c849 [ 750.677898] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 750.677907] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 750.677914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 750.677920] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 750.677926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 750.677932] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000003 [ 750.703681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 750.703742] Node 1 Normal: 61*4kB (UME) 355*8kB (UE) 266*16kB (UE) 70*32kB (UME) 13*64kB (UM) 11*128kB (U) 7*256kB (UM) 1*512kB (U) 1*1024kB (M) 4*2048kB (ME) 918*4096kB (M) = 3783468kB [ 750.703837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.703845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 750.703852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.703859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 750.703864] 31498 total pagecache pages [ 750.703876] 0 pages in swap cache [ 750.703883] Swap cache stats: add 0, delete 0, find 0/0 [ 750.703887] Free swap = 0kB [ 750.703891] Total swap = 0kB [ 750.704240] 1965979 pages RAM [ 750.704245] 0 pages HighMem/MovableOnly [ 750.704249] 339049 pages reserved [ 750.704253] 0 pages cma reserved [ 750.704262] Out of memory: Kill process 16497 (syz-executor.4) score 1007 or sacrifice child [ 750.705147] Killed process 16497 (syz-executor.4) total-vm:74964kB, anon-rss:18348kB, file-rss:34816kB, shmem-rss:0kB 03:39:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:43 executing program 5 (fault-call:6 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:43 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000640)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/164, 0xa4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x2}, 0x20) 03:39:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000006d0008f49805be79438ec3b50000000c0001007402000000657800200002001c000700180001000b00010073696d706c6500000400029604000600ffb43df8b5f1055fc81f472307882556db04e71efc833ddf80dd813414c8d3015c8cfb645b32ff220f8e454a3daf8f6516489c04a4f46fe71f6e88ce7ad6b44db5ea51fb897e5b73"], 0x50}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003100)={0x904, 0x0, 0x8, 0x70bd28, 0x0, {}, [{{0x8}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x32}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3b6c53ac}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x40, 0x9, 0x3}, {0x6, 0x6, 0x42, 0x4}, {0x3, 0x4, 0x0, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x904}, 0x1, 0x0, 0x0, 0x8094}, 0x10) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)=0x3) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfq=nostale_ro,\x00']) umount2(&(0x7f0000000000)='./file1\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file1\x00', 0x0, 0x10}, 0x10) 03:39:43 executing program 5 (fault-call:6 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 751.996670] FAULT_INJECTION: forcing a failure. [ 751.996670] name failslab, interval 1, probability 0, space 0, times 0 [ 751.996725] CPU: 0 PID: 30402 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 751.996733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.996737] Call Trace: [ 751.996756] dump_stack+0x13e/0x194 [ 751.996777] should_fail.cold+0x10a/0x14b [ 751.996796] should_failslab+0xd6/0x130 [ 751.996809] kmem_cache_alloc+0x2b5/0x770 [ 751.996829] __d_alloc+0x2a/0x9b0 [ 751.996844] d_alloc+0x46/0x250 [ 751.996858] d_alloc_parallel+0xd7/0x1740 [ 751.996879] ? lock_downgrade+0x6e0/0x6e0 03:39:43 executing program 0: sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setpipe(r0, 0x407, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) write$binfmt_elf32(r3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x45dbad4aab307b37, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000000)=0xfffffff9, 0x4) [ 751.996896] ? __d_lookup_rcu+0x650/0x650 [ 751.996916] ? d_lookup+0x15a/0x230 [ 751.996931] lookup_open+0x466/0x1750 [ 751.996958] ? complete_walk+0x1f0/0x1f0 [ 751.996985] path_openat+0x1878/0x3c50 [ 751.997012] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 751.997029] ? __lock_is_held+0xad/0x140 [ 751.997046] do_filp_open+0x18e/0x250 [ 751.997057] ? may_open_dev+0xe0/0xe0 [ 751.997078] ? lock_downgrade+0x6e0/0x6e0 [ 751.997094] ? do_raw_spin_unlock+0x164/0x250 [ 751.997108] ? __alloc_fd+0x1bf/0x490 [ 751.997130] do_sys_open+0x29d/0x3f0 [ 751.997143] ? filp_open+0x60/0x60 [ 751.997156] ? SyS_clock_settime+0x1a0/0x1a0 [ 751.997168] ? do_syscall_64+0x4c/0x640 [ 751.997179] ? do_sys_open+0x3f0/0x3f0 [ 751.997192] do_syscall_64+0x1d5/0x640 [ 751.997209] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 751.997218] RIP: 0033:0x45c849 [ 751.997225] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 751.997237] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 751.997244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 751.997251] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 751.997258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 751.997264] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000004 [ 752.058962] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.262975] FAULT_INJECTION: forcing a failure. [ 752.262975] name failslab, interval 1, probability 0, space 0, times 0 [ 752.262988] CPU: 1 PID: 30416 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 752.262995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.262999] Call Trace: [ 752.263016] dump_stack+0x13e/0x194 [ 752.263031] should_fail.cold+0x10a/0x14b [ 752.263047] should_failslab+0xd6/0x130 [ 752.263057] __kmalloc+0x2e9/0x7c0 [ 752.263069] ? ovl_lookup+0x791/0x1100 [ 752.263080] ? lock_downgrade+0x6e0/0x6e0 [ 752.263093] ? selinux_is_enabled+0x5/0x50 [ 752.263103] ? creds_are_invalid+0x44/0x100 [ 752.263115] ovl_lookup+0x791/0x1100 [ 752.263132] ? ovl_path_next+0x200/0x200 [ 752.263147] ? __d_lookup_rcu+0x650/0x650 [ 752.263158] ? mark_held_locks+0xa6/0xf0 [ 752.263167] ? d_lookup+0xdb/0x230 [ 752.263178] ? d_lookup+0x15a/0x230 [ 752.263189] ? ovl_path_next+0x200/0x200 [ 752.263202] lookup_open+0x5d1/0x1750 [ 752.359145] ? complete_walk+0x1f0/0x1f0 [ 752.359169] path_openat+0x1878/0x3c50 [ 752.359190] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 752.371813] ? __lock_is_held+0xad/0x140 [ 752.371830] do_filp_open+0x18e/0x250 03:39:43 executing program 0: memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000240)) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfe, @tick, {}, {}, @connect}], 0x1c) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000100)=0x8000) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000000), 0x0) 03:39:43 executing program 5 (fault-call:6 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 752.371842] ? may_open_dev+0xe0/0xe0 [ 752.371860] ? lock_downgrade+0x6e0/0x6e0 [ 752.371874] ? do_raw_spin_unlock+0x164/0x250 [ 752.371886] ? __alloc_fd+0x1bf/0x490 [ 752.371904] do_sys_open+0x29d/0x3f0 [ 752.371915] ? filp_open+0x60/0x60 [ 752.371929] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.371941] ? do_syscall_64+0x4c/0x640 [ 752.371950] ? do_sys_open+0x3f0/0x3f0 03:39:43 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x166) r0 = socket$kcm(0xa, 0x122000000003, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000)=0x3d, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376863a68fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x29}], 0x1}, 0x0) 03:39:43 executing program 5 (fault-call:6 fault-nth:7): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 752.371962] do_syscall_64+0x1d5/0x640 [ 752.371979] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.371988] RIP: 0033:0x45c849 [ 752.371994] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 752.372005] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 752.372011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 03:39:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x3], 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d1f6832dd5eabf1c90de0073a3d0cbfd8a0620a9aee05d5820d1a6e4b329d81717efd84558ca3a5f48", 0x54}], 0x1}, 0x0) [ 752.372016] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 752.372020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 752.372024] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000005 [ 752.505100] FAULT_INJECTION: forcing a failure. [ 752.505100] name failslab, interval 1, probability 0, space 0, times 0 [ 752.505149] CPU: 0 PID: 30425 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 752.505155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.505159] Call Trace: [ 752.505175] dump_stack+0x13e/0x194 [ 752.505191] should_fail.cold+0x10a/0x14b [ 752.505206] should_failslab+0xd6/0x130 [ 752.505216] kmem_cache_alloc+0x2b5/0x770 [ 752.505234] mb_cache_entry_create+0x9a/0x820 [ 752.505247] ext4_xattr_get+0x481/0x860 [ 752.505271] ? ext4_xattr_ibody_get+0x410/0x410 [ 752.505282] ? xattr_resolve_name+0x238/0x350 [ 752.505294] ? ext4_xattr_trusted_set+0x40/0x40 [ 752.505302] __vfs_getxattr+0xb9/0x100 [ 752.505311] ? __vfs_setxattr+0x130/0x130 [ 752.505324] vfs_getxattr+0xdb/0xf0 [ 752.505334] ovl_check_dir_xattr+0xbf/0xe0 [ 752.505342] ? ovl_copy_up_end+0x40/0x40 [ 752.505361] ovl_lookup_single+0x218/0x6d0 [ 752.505373] ovl_lookup_layer+0x2f8/0x3e0 [ 752.505385] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.505397] ? ovl_lookup_single+0x6d0/0x6d0 [ 752.505407] ? selinux_is_enabled+0x5/0x50 [ 752.505416] ? creds_are_invalid+0x44/0x100 [ 752.505427] ovl_lookup+0x87f/0x1100 [ 752.505441] ? ovl_path_next+0x200/0x200 [ 752.505454] ? __d_lookup_rcu+0x650/0x650 [ 752.505465] ? mark_held_locks+0xa6/0xf0 [ 752.505473] ? d_lookup+0xdb/0x230 [ 752.505484] ? d_lookup+0x15a/0x230 [ 752.505494] ? ovl_path_next+0x200/0x200 [ 752.505510] lookup_open+0x5d1/0x1750 [ 752.505531] ? complete_walk+0x1f0/0x1f0 [ 752.505552] path_openat+0x1878/0x3c50 [ 752.505573] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 752.505587] ? __lock_is_held+0xad/0x140 [ 752.505600] do_filp_open+0x18e/0x250 [ 752.505611] ? may_open_dev+0xe0/0xe0 [ 752.505626] ? lock_downgrade+0x6e0/0x6e0 [ 752.505638] ? do_raw_spin_unlock+0x164/0x250 [ 752.505650] ? __alloc_fd+0x1bf/0x490 [ 752.505666] do_sys_open+0x29d/0x3f0 [ 752.505677] ? filp_open+0x60/0x60 [ 752.505689] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.505701] ? do_syscall_64+0x4c/0x640 [ 752.505711] ? do_sys_open+0x3f0/0x3f0 [ 752.505721] do_syscall_64+0x1d5/0x640 [ 752.505735] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.505743] RIP: 0033:0x45c849 [ 752.505748] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 752.505758] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 752.505763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 752.505768] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 752.505785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 752.505789] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000006 [ 752.506002] overlayfs: invalid redirect (./file0) [ 752.587535] Dead loop on virtual device ip6_vti0, fix it urgently! [ 752.688194] FAULT_INJECTION: forcing a failure. [ 752.688194] name failslab, interval 1, probability 0, space 0, times 0 [ 752.688220] CPU: 0 PID: 30431 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 752.688228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.688232] Call Trace: [ 752.688253] dump_stack+0x13e/0x194 [ 752.688271] should_fail.cold+0x10a/0x14b [ 752.688288] should_failslab+0xd6/0x130 [ 752.688299] kmem_cache_alloc+0x2b5/0x770 [ 752.688317] mb_cache_entry_create+0x9a/0x820 [ 752.688331] ext4_xattr_get+0x481/0x860 [ 752.688344] ? ext4_xattr_ibody_get+0x410/0x410 [ 752.688355] ? xattr_resolve_name+0x238/0x350 [ 752.688367] ? ext4_xattr_trusted_set+0x40/0x40 [ 752.688375] __vfs_getxattr+0xb9/0x100 [ 752.688385] ? __vfs_setxattr+0x130/0x130 [ 752.688399] vfs_getxattr+0xdb/0xf0 [ 752.688414] ovl_lookup_single+0x29c/0x6d0 [ 752.688427] ovl_lookup_layer+0x2f8/0x3e0 [ 752.688441] ? rcu_read_lock_sched_held+0x10a/0x130 [ 752.688454] ? ovl_lookup_single+0x6d0/0x6d0 [ 752.688467] ? selinux_is_enabled+0x5/0x50 [ 752.688477] ? creds_are_invalid+0x44/0x100 [ 752.688490] ovl_lookup+0x87f/0x1100 [ 752.688504] ? ovl_path_next+0x200/0x200 [ 752.688516] ? __d_lookup_rcu+0x650/0x650 [ 752.688526] ? mark_held_locks+0xa6/0xf0 [ 752.688534] ? d_lookup+0xdb/0x230 [ 752.688544] ? d_lookup+0x15a/0x230 [ 752.688554] ? ovl_path_next+0x200/0x200 [ 752.688562] lookup_open+0x5d1/0x1750 [ 752.688579] ? complete_walk+0x1f0/0x1f0 [ 752.688598] path_openat+0x1878/0x3c50 [ 752.688616] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 752.688628] ? __lock_is_held+0xad/0x140 [ 752.688639] do_filp_open+0x18e/0x250 [ 752.688649] ? may_open_dev+0xe0/0xe0 [ 752.688673] ? lock_downgrade+0x6e0/0x6e0 [ 752.688687] ? do_raw_spin_unlock+0x164/0x250 [ 752.688700] ? __alloc_fd+0x1bf/0x490 [ 752.688716] do_sys_open+0x29d/0x3f0 [ 752.688727] ? filp_open+0x60/0x60 [ 752.688739] ? SyS_clock_settime+0x1a0/0x1a0 [ 752.688749] ? do_syscall_64+0x4c/0x640 [ 752.688758] ? do_sys_open+0x3f0/0x3f0 [ 752.688769] do_syscall_64+0x1d5/0x640 [ 752.688784] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.688792] RIP: 0033:0x45c849 [ 752.688798] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 752.688809] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 752.688814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 752.688820] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 752.688826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 752.688831] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000007 [ 752.688900] overlayfs: invalid redirect (./file0) [ 753.238986] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 03:39:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:46 executing program 5 (fault-call:6 fault-nth:8): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)) 03:39:46 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000040)={0x5, 0x8b}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="f1ebba2673d4d0c1823256f54a1513b5905c0a592e24f1fad86ffea7ef94fa3721945c9bcc95a28905c67330cab3d8b5af0b36ab7902", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:46 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x0, 0x1) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xff, 0x8) setxattr$security_capability(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [], r1}, 0x18, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275736b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530eb4e6a505b3659194e96d0f2b2a62867a2cec282e7196005a9a2e17d22c7eb458075a76b7035f71d1e036d82df37d8aa03b028a4007213b24933a26b7bd8c08077d72e654e63d39d572a9f68cddaa4c210906a9404aa3e2881fafcdf3ffc33f678546b1db29c6ea85a78d16bc66dceaba768a9b36972c42a27fc3a98a0b7ed4405b9bff36589a5ac363fc71ab8489c56d2703acd58208a139cfa7adead87f0b0cc36da42c4935137de2feee595b6397115e55506b61d44506476515283a6707c6fb6e9a1fce562353cbe8d6a209b"]) chown(&(0x7f0000000600)='./bus/file1\x00', 0x0, 0x0) 03:39:46 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x127402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x612600, 0x0) ioctl$BLKROGET(r9, 0x125e, &(0x7f0000000280)) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000200)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/167, 0xa7}) [ 754.979289] overlayfs: missing 'workdir' 03:39:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$usbfs(r1, &(0x7f00000001c0)=""/79, 0x4f) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=nost\a\x00\x00\x00ro,\x00']) umount2(&(0x7f0000000000)='./file1\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@random={'os2.', '.posix_acl_access@\\\x00'}) [ 755.000397] overlayfs: missing 'workdir' [ 755.015840] FAULT_INJECTION: forcing a failure. [ 755.015840] name failslab, interval 1, probability 0, space 0, times 0 [ 755.035982] CPU: 1 PID: 30451 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 03:39:46 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r6, r9, 0x1, 0x2, 0x3}, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 755.043933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.053298] Call Trace: [ 755.055902] dump_stack+0x13e/0x194 [ 755.059555] should_fail.cold+0x10a/0x14b [ 755.063724] should_failslab+0xd6/0x130 [ 755.067710] kmem_cache_alloc+0x2b5/0x770 [ 755.072098] mb_cache_entry_create+0x9a/0x820 [ 755.077137] ext4_xattr_get+0x481/0x860 [ 755.081310] ? ext4_xattr_ibody_get+0x410/0x410 [ 755.086179] ? xattr_resolve_name+0x238/0x350 [ 755.090895] ? ext4_xattr_trusted_set+0x40/0x40 [ 755.096075] __vfs_getxattr+0xb9/0x100 [ 755.100329] ? __vfs_setxattr+0x130/0x130 [ 755.104496] vfs_getxattr+0xdb/0xf0 [ 755.108404] ovl_lookup_single+0x304/0x6d0 [ 755.112664] ovl_lookup_layer+0x2f8/0x3e0 [ 755.116816] ? rcu_read_lock_sched_held+0x10a/0x130 [ 755.121842] ? ovl_lookup_single+0x6d0/0x6d0 [ 755.126274] ? selinux_is_enabled+0x5/0x50 [ 755.130520] ? creds_are_invalid+0x44/0x100 [ 755.134838] ovl_lookup+0x87f/0x1100 [ 755.138547] ? ovl_path_next+0x200/0x200 [ 755.142807] ? __d_lookup_rcu+0x650/0x650 [ 755.147001] ? mark_held_locks+0xa6/0xf0 [ 755.151050] ? d_lookup+0xdb/0x230 [ 755.154596] ? d_lookup+0x15a/0x230 [ 755.159707] ? ovl_path_next+0x200/0x200 [ 755.164371] lookup_open+0x5d1/0x1750 [ 755.168164] ? complete_walk+0x1f0/0x1f0 [ 755.172475] path_openat+0x1878/0x3c50 [ 755.176365] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 755.181743] ? __lock_is_held+0xad/0x140 [ 755.185890] ? SyS_bpf+0xd58/0x2d12 [ 755.189535] do_filp_open+0x18e/0x250 [ 755.194041] ? may_open_dev+0xe0/0xe0 [ 755.197936] ? lock_downgrade+0x6e0/0x6e0 [ 755.202239] ? do_raw_spin_unlock+0x164/0x250 [ 755.206736] ? __alloc_fd+0x1bf/0x490 [ 755.210539] do_sys_open+0x29d/0x3f0 [ 755.214605] ? filp_open+0x60/0x60 [ 755.218131] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.222570] ? do_syscall_64+0x4c/0x640 [ 755.226556] ? do_sys_open+0x3f0/0x3f0 [ 755.230448] do_syscall_64+0x1d5/0x640 [ 755.234364] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.239562] RIP: 0033:0x45c849 [ 755.242747] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 755.250450] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 755.257707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 755.264972] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 755.272239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 755.279664] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000008 03:39:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x10) 03:39:46 executing program 5 (fault-call:6 fault-nth:9): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 755.314430] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 755.316004] overlayfs: invalid redirect (./file0) 03:39:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c0000000000000000010000000000000008410000006574683a"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x81, 0x28480) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000426bd7000fbdbdf254c00000024002c80080000000200000008000000030000000800000003000000080000007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8200, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000040030000a0010000a0010000a001000000000000a001000070020000700200007002000070020000700200000400000000000000000000000dc263833b7311442c39b11ca62ccbeafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007767320000000000000000000000000076657468315f766c616e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000fe88000000000000000000000000000100004000000000000000ffffe00000020000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x3a0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RLCREATE(r9, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x0, 0x3, 0x6}}}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @empty, @val={@val={0x9100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) 03:39:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e53f5ab6e66733d6e6f7374616c655f"]) [ 755.466467] FAULT_INJECTION: forcing a failure. [ 755.466467] name failslab, interval 1, probability 0, space 0, times 0 [ 755.478179] CPU: 0 PID: 30473 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 755.486090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.495563] Call Trace: [ 755.498185] dump_stack+0x13e/0x194 [ 755.501845] should_fail.cold+0x10a/0x14b [ 755.506116] should_failslab+0xd6/0x130 [ 755.510312] kmem_cache_alloc+0x2b5/0x770 [ 755.514498] mb_cache_entry_create+0x9a/0x820 [ 755.519025] ext4_xattr_get+0x481/0x860 [ 755.523027] ? ext4_xattr_ibody_get+0x410/0x410 [ 755.527719] ? xattr_resolve_name+0x238/0x350 [ 755.532236] ? ext4_xattr_trusted_set+0x40/0x40 [ 755.536932] __vfs_getxattr+0xb9/0x100 [ 755.540845] ? __vfs_setxattr+0x130/0x130 [ 755.545018] vfs_getxattr+0xdb/0xf0 [ 755.548668] ovl_lookup_single+0x304/0x6d0 [ 755.552932] ovl_lookup_layer+0x2f8/0x3e0 [ 755.557102] ? rcu_read_lock_sched_held+0x10a/0x130 [ 755.562140] ? ovl_lookup_single+0x6d0/0x6d0 [ 755.566566] ? selinux_is_enabled+0x5/0x50 [ 755.570900] ? creds_are_invalid+0x44/0x100 [ 755.575285] ovl_lookup+0x87f/0x1100 [ 755.579023] ? ovl_path_next+0x200/0x200 [ 755.583105] ? __d_lookup_rcu+0x650/0x650 [ 755.587280] ? mark_held_locks+0xa6/0xf0 [ 755.591467] ? d_lookup+0xdb/0x230 [ 755.595024] ? d_lookup+0x15a/0x230 [ 755.598678] ? ovl_path_next+0x200/0x200 [ 755.602746] lookup_open+0x5d1/0x1750 [ 755.606546] ? complete_walk+0x1f0/0x1f0 [ 755.610605] path_openat+0x1878/0x3c50 [ 755.614510] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 755.619180] ? __lock_is_held+0xad/0x140 [ 755.623251] do_filp_open+0x18e/0x250 [ 755.627047] ? may_open_dev+0xe0/0xe0 [ 755.630853] ? lock_downgrade+0x6e0/0x6e0 [ 755.635002] ? do_raw_spin_unlock+0x164/0x250 [ 755.639498] ? __alloc_fd+0x1bf/0x490 [ 755.643295] do_sys_open+0x29d/0x3f0 [ 755.647001] ? filp_open+0x60/0x60 [ 755.650543] ? SyS_clock_settime+0x1a0/0x1a0 [ 755.654950] ? do_syscall_64+0x4c/0x640 [ 755.658911] ? do_sys_open+0x3f0/0x3f0 [ 755.662798] do_syscall_64+0x1d5/0x640 [ 755.666688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.671872] RIP: 0033:0x45c849 [ 755.675047] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 755.682763] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 755.690193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 755.697601] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 755.705500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 755.712776] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000009 [ 755.727414] overlayfs: invalid redirect (./file0) 03:39:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x100000000, 0x183042) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7fffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x713102, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x19) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r6, r9, 0x1, 0x2, 0x3}, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:49 executing program 5 (fault-call:6 fault-nth:10): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x30101, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00a5c79efa7e77d981b7d8010000002c391f60000000004d58afb902bd929d99674b4bd289efc5da604f4dd99758bc4b6db64dc7c838a264e6008a18acaf457a5ce765a5ce64010601000000002481af6e0c"]) 03:39:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17, 0x7fffffff}], 0x0, &(0x7f0000000140)={[{@fat=@showexec='showexec'}], [{@permit_directio='permit_directio'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 758.003438] overlayfs: invalid redirect (./file0) [ 758.030586] FAULT_INJECTION: forcing a failure. [ 758.030586] name failslab, interval 1, probability 0, space 0, times 0 [ 758.050990] CPU: 0 PID: 30482 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 758.054445] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 758.058919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.058950] Call Trace: [ 758.058970] dump_stack+0x13e/0x194 [ 758.058985] should_fail.cold+0x10a/0x14b [ 758.059002] should_failslab+0xd6/0x130 [ 758.091308] kmem_cache_alloc+0x2b5/0x770 [ 758.095468] ? __lock_acquire+0x5f7/0x4620 [ 758.099708] __d_alloc+0x2a/0x9b0 [ 758.103298] d_alloc+0x46/0x250 [ 758.106581] d_alloc_parallel+0xd7/0x1740 [ 758.110732] ? save_trace+0x290/0x290 [ 758.114527] ? __d_lookup_rcu+0x650/0x650 [ 758.118664] ? lock_acquire+0x170/0x3f0 [ 758.123577] ? lookup_slow+0x129/0x410 [ 758.127454] lookup_slow+0x175/0x410 [ 758.131162] ? page_put_link+0x1b0/0x1b0 [ 758.135217] lookup_one_len_unlocked+0x2c7/0x320 [ 758.139960] ? lookup_slow+0x410/0x410 [ 758.143839] ? ovl_lookup_single+0x392/0x6d0 [ 758.148241] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 758.153249] ovl_lookup_single+0x33/0x6d0 [ 758.157386] ovl_lookup_layer+0x2f8/0x3e0 [ 758.161523] ? rcu_read_lock_sched_held+0x10a/0x130 [ 758.166526] ? ovl_lookup_single+0x6d0/0x6d0 [ 758.170928] ? selinux_is_enabled+0x5/0x50 [ 758.175153] ? creds_are_invalid+0x44/0x100 [ 758.179468] ovl_lookup+0x87f/0x1100 [ 758.183175] ? ovl_path_next+0x200/0x200 [ 758.187314] ? __d_lookup_rcu+0x650/0x650 [ 758.191449] ? mark_held_locks+0xa6/0xf0 [ 758.195522] ? d_lookup+0xdb/0x230 [ 758.199092] ? d_lookup+0x15a/0x230 [ 758.202722] ? ovl_path_next+0x200/0x200 [ 758.206801] lookup_open+0x5d1/0x1750 [ 758.210659] ? complete_walk+0x1f0/0x1f0 [ 758.214731] path_openat+0x1878/0x3c50 [ 758.218645] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 758.223319] ? __lock_is_held+0xad/0x140 [ 758.227405] do_filp_open+0x18e/0x250 [ 758.231200] ? may_open_dev+0xe0/0xe0 [ 758.234991] ? lock_downgrade+0x6e0/0x6e0 [ 758.239166] ? do_raw_spin_unlock+0x164/0x250 [ 758.243663] ? __alloc_fd+0x1bf/0x490 [ 758.247511] do_sys_open+0x29d/0x3f0 [ 758.251229] ? filp_open+0x60/0x60 [ 758.254765] ? SyS_clock_settime+0x1a0/0x1a0 [ 758.259162] ? do_syscall_64+0x4c/0x640 [ 758.263150] ? do_sys_open+0x3f0/0x3f0 [ 758.267032] do_syscall_64+0x1d5/0x640 [ 758.270932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.276119] RIP: 0033:0x45c849 03:39:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000140)) 03:39:49 executing program 5 (fault-call:6 fault-nth:11): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x24900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fremovexattr(r3, &(0x7f0000000080)=@random={'osx.', '^^md5sum\'\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='veth1_virt_wifi\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="eeff0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r9, 0xfff8, 0xa7, "eaca3585d6e4ff7eb2c7fa2d465bc9000000a0f7042d200b4dba665f3be8ba823453d88e9a16ae54aad5c7158eaf116b65a1168afa717718de6480fddf9d9aa85de7573394b6494f81812c7466953afc5c94921175b5f2e42a5af13986d64e7806b9e0bf48f4db2b50e9635c92ba5987e05e3e759665b862a967c1ec3992f9f603f3f26b0574163fafd1d723d6fbca25f3cc62226752f5caf957af8c1f22b0351ceff31d50c4d9"}, 0xaf) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000001c0)={0x200, 0x0, 0x1ff, 0x3f, r9}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x254, 0x3, 0x78118e1c276b5a79, 0x0, 0x430, 0x8, 0x5, 0x3ff, r10}, 0x20) [ 758.279320] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 758.287044] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 758.294323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 758.301610] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.308901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 758.316182] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000a 03:39:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0x3ff, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a6d, 0x4, [], @ptr=0x9}}) statx(r2, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10, &(0x7f0000000200)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x2, 0x200000) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 03:39:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r6, r9, 0x1, 0x2, 0x3}, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 758.439322] overlayfs: invalid redirect (./file0) [ 758.447276] FAULT_INJECTION: forcing a failure. [ 758.447276] name failslab, interval 1, probability 0, space 0, times 0 [ 758.459805] CPU: 0 PID: 30507 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 758.467851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.477338] Call Trace: [ 758.479939] dump_stack+0x13e/0x194 [ 758.483585] should_fail.cold+0x10a/0x14b [ 758.487734] should_failslab+0xd6/0x130 [ 758.491848] __kmalloc+0x2e9/0x7c0 [ 758.495422] ? rcu_read_lock_sched_held+0x10a/0x130 [ 758.500459] ? ovl_alloc_entry+0x21/0x70 [ 758.504522] ? ovl_lookup_single+0x6d0/0x6d0 [ 758.508919] ovl_alloc_entry+0x21/0x70 [ 758.512796] ovl_lookup+0x4db/0x1100 [ 758.516525] ? ovl_path_next+0x200/0x200 [ 758.520678] ? __d_lookup_rcu+0x650/0x650 [ 758.524845] ? mark_held_locks+0xa6/0xf0 [ 758.528900] ? d_lookup+0xdb/0x230 [ 758.532428] ? d_lookup+0x15a/0x230 [ 758.536043] ? ovl_path_next+0x200/0x200 [ 758.540198] lookup_open+0x5d1/0x1750 [ 758.544206] ? complete_walk+0x1f0/0x1f0 [ 758.548279] path_openat+0x1878/0x3c50 [ 758.552160] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 758.556816] ? __lock_is_held+0xad/0x140 [ 758.560883] do_filp_open+0x18e/0x250 [ 758.564688] ? may_open_dev+0xe0/0xe0 [ 758.568493] ? lock_downgrade+0x6e0/0x6e0 [ 758.572652] ? do_raw_spin_unlock+0x164/0x250 [ 758.577153] ? __alloc_fd+0x1bf/0x490 [ 758.580952] do_sys_open+0x29d/0x3f0 [ 758.584728] ? filp_open+0x60/0x60 [ 758.588275] ? SyS_clock_settime+0x1a0/0x1a0 [ 758.592672] ? do_syscall_64+0x4c/0x640 [ 758.596631] ? do_sys_open+0x3f0/0x3f0 [ 758.600538] do_syscall_64+0x1d5/0x640 [ 758.604454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.609660] RIP: 0033:0x45c849 [ 758.612846] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 758.620553] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 758.627811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 03:39:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) syz_mount_image$ceph(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='./file1\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="a5a8ab4c8cdb701c6eeb5023698f9485e527239494198eda2a38743292382da80f6d1f9a636d209728abcc9e8c420fb215bc083042d1e7162a9bf6276d90", 0x3e}], 0x1, &(0x7f0000000240)='%user!{$ppp1systemvmnet1}\x00') umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 758.635063] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.642317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 758.649594] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000b [ 758.715515] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:39:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000300)=0xc) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000200)={&(0x7f0000000180)=""/74, 0x4a}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x6e6, 0x1) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x3f5, 0x4, 0x70bd2c, 0x25dfdbfa, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x8c0) 03:39:52 executing program 5 (fault-call:6 fault-nth:12): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:52 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r6, r9, 0x1, 0x2, 0x3}, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='=0']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 761.030272] overlayfs: invalid redirect (./file0) [ 761.040930] FAULT_INJECTION: forcing a failure. [ 761.040930] name failslab, interval 1, probability 0, space 0, times 0 [ 761.058400] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 761.062937] CPU: 0 PID: 30527 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 761.075003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.084476] Call Trace: [ 761.087075] dump_stack+0x13e/0x194 [ 761.090875] should_fail.cold+0x10a/0x14b [ 761.095045] ? ovl_i_callback+0x20/0x20 [ 761.099171] should_failslab+0xd6/0x130 [ 761.103148] ? ovl_i_callback+0x20/0x20 [ 761.107112] kmem_cache_alloc+0x2b5/0x770 [ 761.111276] ? lock_acquire+0x170/0x3f0 [ 761.115297] ? lock_downgrade+0x6e0/0x6e0 [ 761.119480] ? ovl_i_callback+0x20/0x20 [ 761.123471] ? ovl_lock_rename_workdir.cold+0x23/0x23 [ 761.128676] ovl_alloc_inode+0x18/0x190 [ 761.132655] ? ovl_i_callback+0x20/0x20 [ 761.136630] alloc_inode+0x5d/0x170 [ 761.140265] iget5_locked+0x16c/0x450 [ 761.144087] ? ovl_inode_test+0x50/0x50 [ 761.148081] ovl_get_inode+0x1b3/0x917 [ 761.151957] ovl_lookup+0x5ad/0x1100 [ 761.155687] ? ovl_path_next+0x200/0x200 [ 761.159758] ? __d_lookup_rcu+0x650/0x650 [ 761.163916] ? mark_held_locks+0xa6/0xf0 [ 761.167992] ? d_lookup+0xdb/0x230 [ 761.171530] ? d_lookup+0x15a/0x230 [ 761.175150] ? ovl_path_next+0x200/0x200 [ 761.179280] lookup_open+0x5d1/0x1750 [ 761.183726] ? complete_walk+0x1f0/0x1f0 [ 761.187794] path_openat+0x1878/0x3c50 [ 761.191859] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 761.196537] ? __lock_is_held+0xad/0x140 [ 761.200621] do_filp_open+0x18e/0x250 [ 761.204415] ? may_open_dev+0xe0/0xe0 [ 761.208205] ? lock_downgrade+0x6e0/0x6e0 [ 761.212363] ? do_raw_spin_unlock+0x164/0x250 [ 761.216882] ? __alloc_fd+0x1bf/0x490 [ 761.220853] do_sys_open+0x29d/0x3f0 [ 761.224562] ? filp_open+0x60/0x60 [ 761.228108] ? SyS_clock_settime+0x1a0/0x1a0 [ 761.232515] ? do_syscall_64+0x4c/0x640 [ 761.236496] ? do_sys_open+0x3f0/0x3f0 [ 761.240385] do_syscall_64+0x1d5/0x640 [ 761.244269] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 761.249458] RIP: 0033:0x45c849 [ 761.252651] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 761.260359] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 761.267641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 03:39:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 761.274920] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 761.282194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 761.289477] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000c 03:39:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000140)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482b77b4179b3175ff3de14ce6a5e3dd01cbff3d7fc20b930d11a3a4", 0x66}], 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x9) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:52 executing program 5 (fault-call:6 fault-nth:13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 761.464619] overlayfs: invalid redirect (./file0) [ 761.484284] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 761.493426] FAULT_INJECTION: forcing a failure. [ 761.493426] name failslab, interval 1, probability 0, space 0, times 0 03:39:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:52 executing program 3: syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x800, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000200)="d6526cdac5ec96d97b61e77c875aeda2", 0x10}, {&(0x7f0000000240)="24c25803eb0755b69bcc520c0e9e4e96cc4e3a9cb6", 0x15, 0x101}, {&(0x7f0000000280)="7d52da9c538e0b196b8e322eee09b58a5dcbaf3132900a548d466ae8b26f4c0f5c43cae176a4113db17977b953b909b83df12a5afc6982c33290f194e4e520f57ee8897c6a16c5e59fe7106adc9d37dbf7af6e05b8a266650864e9603d561da7efc3b3e95a81972b641a55c9a3be2250f29781069cf848fadaac29537ac4551b3cdcc44780b8", 0x86, 0x4aa2}, {&(0x7f0000000340)="084a183892141b72094132011d25aa88a57e349e042907137f06b38b888f22a820ceb3d74101d75dd7537578b8300c75b82b202e42081a", 0x37, 0x4}, {&(0x7f0000000380)="f3314d28e6f49bb5a6909fb08b12c5e183b962f0336aefeef0c2aa00c4d7c2ef416661a9", 0x24, 0x3006}], 0x20000, &(0x7f0000000440)='/dev/loop-control\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000140)=ANY=[]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x222402, 0x0) setsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f00000004c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$bt_rfcomm(r6, &(0x7f0000000040), 0xa) [ 761.534389] CPU: 1 PID: 30553 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 761.542420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.551781] Call Trace: [ 761.554397] dump_stack+0x13e/0x194 [ 761.558044] should_fail.cold+0x10a/0x14b [ 761.562210] should_failslab+0xd6/0x130 [ 761.566202] kmem_cache_alloc+0x2b5/0x770 [ 761.570396] ? ovl_alloc_inode+0x18/0x190 [ 761.574559] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 761.580050] selinux_inode_alloc_security+0xb1/0x2a0 [ 761.585711] security_inode_alloc+0x8f/0xd0 [ 761.590361] inode_init_always+0x549/0xaf0 [ 761.597835] ? ovl_lock_rename_workdir.cold+0x23/0x23 [ 761.603054] alloc_inode+0x7a/0x170 [ 761.606869] iget5_locked+0x16c/0x450 [ 761.610670] ? ovl_inode_test+0x50/0x50 [ 761.615067] ovl_get_inode+0x1b3/0x917 [ 761.619000] ovl_lookup+0x5ad/0x1100 [ 761.622721] ? ovl_path_next+0x200/0x200 [ 761.626791] ? __d_lookup_rcu+0x650/0x650 [ 761.630932] ? mark_held_locks+0xa6/0xf0 [ 761.635073] ? d_lookup+0xdb/0x230 [ 761.638606] ? d_lookup+0x15a/0x230 [ 761.642220] ? ovl_path_next+0x200/0x200 [ 761.646268] lookup_open+0x5d1/0x1750 [ 761.650061] ? complete_walk+0x1f0/0x1f0 [ 761.654133] path_openat+0x1878/0x3c50 [ 761.658010] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 761.662670] ? __lock_is_held+0xad/0x140 [ 761.666729] do_filp_open+0x18e/0x250 [ 761.670611] ? may_open_dev+0xe0/0xe0 [ 761.674604] ? lock_downgrade+0x6e0/0x6e0 [ 761.678950] ? do_raw_spin_unlock+0x164/0x250 [ 761.683555] ? __alloc_fd+0x1bf/0x490 [ 761.688138] do_sys_open+0x29d/0x3f0 [ 761.691943] ? filp_open+0x60/0x60 [ 761.697285] ? SyS_clock_settime+0x1a0/0x1a0 [ 761.701802] ? do_syscall_64+0x4c/0x640 [ 761.707666] ? do_sys_open+0x3f0/0x3f0 [ 761.711817] do_syscall_64+0x1d5/0x640 [ 761.716396] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 761.721675] RIP: 0033:0x45c849 [ 761.724858] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 761.736976] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 761.744260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 761.751531] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 761.759140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 761.766418] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000d [ 761.791707] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:39:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c965d6a7eab0b5f3e3fab69d83b244"], 0x0, 0xed, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=nostalF_ro,\x00']) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={&(0x7f0000000580)=@canfd={{0x0, 0x0, 0x1}, 0x37, 0x2, 0x0, 0x0, "1de231feaea7461e5ee648706c75e3ec5dae47bbe9bb9eb00b62adadcfc1219d8c08a175d6e34fb42ae766955fe63c36942613a54da07f7b222469ea5ecfbb4b"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xc000011) ptrace$cont(0x7, r1, 0x0, 0x4) ptrace$cont(0x18, 0x0, 0xe, 0xffffffff00000003) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, 0x464, 0x2, 0x70bd22, 0x25dfdbfb, "122aa567b0e6a2f22ce9638b68bfbb6c6bc6c4a231ebc41fd4c6b4e8a963202e61c930de72330cd94c2a712d1a65186bc5a19c3b7730665167f10c530c532258e333099b8112e3db72c5b197aa420a3467a4be78e9e5aff361073f2a5cfd998533bb7ce5bc8767b1a9213a8e97e0b22d1098ea9cbc579bc5edd2f2bd9cf47a960d5309be123b4904adc79ceb344a4ed00eb092144c5f1d971a9aa3a44151d58a6d6f2cd30b31221806d7b51171a1b2d5a55ba2d71a9286aa", ["", "", "", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:55 executing program 5 (fault-call:6 fault-nth:14): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000600)="96b3299b1a6fcf238a0eea5531cda355ddb34e6f86738f823e76e15452c3ba554240d1933c00a9133200b1c6c22dd983f9d93e5c736a58716f03671b2f8b3ccfe14137fc5c262c034b0329e2f1fe47b8741072c297739fb2f9dfb2913b92db3442d00bbf63f18e03e52a10c9624a2569c2dab5bb09870626e71ac91da86d703fb6802cd38b3ef31e9d10120106c82562b38331c9bd7eed246e47a8d8348fc7d2745725f9e0d8ca554e33de00fab588a4e7c3e0b9b2d6c86a782ba3ad9406f244fcc6057e7a61ca97b4e582d194953a70aab8a25cf90861fda977e591186db7cde7400e84071efaf6ce05fdc76cca1a8445d07ca2a149e1239e81bf008c185bc940d62a0b5a1dd11bfe34c4217d492a798e2eb73f692bc41ed526b1332abbb8101f9518a077906846b52a2ea44aaa70894ccac23ddc61e965be685fea54261330eac6b9723a0b88196a3ec180fc115b57f5f0eee8f990a63c76b2c12a1d492f1197169e9123ce11c5edefb29d4c4f31cc97fd2eff38850c54808d78d9808822102c323613258c8a0bb843294a8a5a4eb95a44521e0b04cf6e5feeb97877e2732aec35e5c65d83ae95e1a7135160b5487a57d235444b55f46e01483465afa6c0d85d4c72b75280955e93be712cedabf9a6d1a6585a666b90b9d23ee1bd173393dde4be8d02de4d7225195f2499b7ef24a7de5ba9dbd2fc5d6d1f7d2aa49c59436965c1ba699093a0194100a07facb40c74a1ee5c7ddfb388e007bea4525a6c1fe1d974459935d5c0bf37c6e5d17a224e6aca5bc10f3e034a130c310afca0f1bdd4ad49278c6d6535bb2bcd9df1a1f76b2065819c870d7040fb3ce5f1430b2318f10a1e8c0957c8b3314b6007f3f8c09e0cc4e5862404b250503bcf43046107a5730c68906a00e1993f5431533a075a0b1cea6a8eaa7d7efdf90e1f5f59d5c72a30fb9140af4538081a7288d1ab76bf9be73b5ff77d39fc35a77594394fe33bea8a4b62929935d959da98111196b0d41083b312077b3e58a67d795ddc1a995eeab027fe79e499598a2dc9e43fe7853d95466116874b80cb71e06dc23859297fc298fe045489b49c51aca0fe7d255a24fd2a2c467b6c3f58fe1845e5ad35859ef9093aa76dd7dfaa4a3cc5898f38e794dcc99a7bd13ea297d269361d57fd3e31ef35abd8dfc92e39fa181909f877c7ba7502a52aebc8d54f88d43cebce2909fdc1acf7908cf6a4de8b3f3001066e8c359da720c25ef6341be78857fd9432afb0d0bea2dd86feb46df9067a6a738eaed291f23dcea66ccce94658a8b41ba8611a8af6e2a3ddc9b506976838cf9f5b6b301e1f20e9793a3feb757ecc34b3eef4a5d032fed9f01b4b4bc223972731869f150781877962ca1f412ed96710eb921fd2e43cb5ea262d07c8635fc1a2a76775e71844f47a1d85e868c8ea1c825cb7caf868817b47dce4ce2f6153888113980e71fa196b3348a0dfa80b52f4d5642dcb1afd5b779efdcdecd5b792d6b6119be07f45cbaf9302d3436f631c7aa646a76c7b72c188277daf8b14bcecc95bb70fec62d8ce9054b4b2c68ba6199643ad94d00a23dbc45f937c5c7568c9d4dd6a7ade1671639b530e6ca92cbf93fdd45360daac16761b655b94cbf4da1f4e3cce0e54fd1b9b1964ecc401ff8105378567137f6ca73f3b655a13d201a5722545a5bda0cd3af0777f2bea3af602d34d2912ab7f8322293eadf2d103f21cc0dfd427abae92b2941884fef4cd9c9bfef2da2c938e448813ea18e462acb881820bbb4bf2ec2befcfa74494a3ab05c2717f20fc7d2e9f1813d5352962bdf1833a72ed2ed37666e0a3e073c416e104d7d7e8c1d0f7d4f9fb457bfdcd7e7a3983a364066c1401dc9eb16d7f1a3b25925230efb3d0abfacb2f6dc929779b2dce9d2d01ba8ecce401c1d4d70f72fe7bfdf529ae02b5e08faffbd6d2e5dd694e17384718136908b9ce3450213fccd2d55b8dadae8212f019d71fac0b082bed16f469841c8d0d3bf5b776b1f2eca4fe2b9e5e113ca6390d3f4432c674f92d1afdfb189a0e30fc2ecef56e4c69272e2f635ad5e15ef46fafba617931810475cfc9c63532d453979fe01d2b42eb9da326ecea7b73bd7306d75c7f5154719e82b362c7a216696569da651f36c6e29085b04cf31029362763ad0c7721d273840d4aaa436efb411e7c67ad4dbf39fd4f70694e326f4f6f26dc22784698df7dd08e0f61a3276eff19486f0cdc7a83beddc7ecbfa812eab44f998be7e619539b94ac210489f214d3961b4693120f24e7e7ae6003f5b8b9af5e7259c44c823d1bb4f4412ddd517daac29ac35289c8660a1b85bd125a6a2d1d7c403423b729acef1e0cb8a78ced6464c01df36f5ea2cf3f0ddb6e5c7a11e32b633479b66879fed8709c3012e88a276df4b6266f1713c31b29abf3a6a415aedebcc5cd38f2d033acfda38ba5cc23a9bfc96e4dc52cc514858f701ffc8959330728b4724cf79346a847316f1bc709cab08b815bd4781b6ab95e6284b2e3ccda9bd079e8460c5e712c3da457b1f166366edce5037a476898519e6f4740ac16bb2454cafbebd077fde6ef20735c6bf34e2497d28bb52bdbb0647cc55cacfda219492badd6b395f0659ba24073a4402a1ea5004285b7d6b5c09730375827c7fb7134cf1349e5ab25e55a114a6c5286302ba7de31e8bfa5f063b1e0cbd54604b4393f7bb96fbc4ece4463d899fff695fdcf3389914211c168972b095a324bfabddc18356b18be9ecc6cf8b7a8093dfaa7129eba2f187b783c510e4b6e172d0711392922d545d56beee5a8f993fa0bdfeb2dc247c57e9b6d43f17279d079e73279d22cd1b98825e5d8d01cb17c8714650d75c11563aa2ac2a886334c455d0d79d84671e998c0a0073e9064e779607fcb7edb0a97fe47ddb559c8995b6c07b187d3c42add8ba065f378e99dc76e390d76deeb0fbcf4aa191613639b89160c5ed7deb0c22b6e2f0b06804d4fe62f27234e130b7fb20612f6ea5bd2f620538d66b56a614609ad4efdd8a92945a57ae19b95c23c90b136c197a4e42334ca7a989fc1d69f518400aa2f58846d343fef2d796e73b45387eac64b37d18d222bc459a7097fb21fcd1578292a15042bd82a5fbc3d0e9073337bfe2acec2b454a618acfef5b357701013f465fdb55705028d9cf57f84bcfcc4e627cf9ed1f9012eb6a554760c09aa037ce836c51932107f317806d497de9249c529e7c7b418ddf820d901254939d9f68f1912a3c181f6cf7c584598a0463b281008d8b3ca59ba0fda200495795d98cf64363aade905c53ce611d3d531928d992b51cc2b08fe780de76ac267aae613c42f40a2ad5cbbaaccf831d468a28f3c438642a7277139acb16be20bf028aedbf89b4d1e545b870f9a78047fccecd83d2b0c28956571fac7b5ecba8eb251e7915aad21920ea2ca12543ed6039210fa36230fb5d50b09e8e9f99b9b2a1b88bcdf005e9e5b3c9d6d30629f699ad22725b36153cc4edfebad3563305227b7af4360877d60a950b31cc59e136a332f205b35a2f9d39a55616637d1d8d3a1aab8c338b634a2759ee235d19a2ead3a524540923b458eaa9f5d443b6ab27d72c3b1af14fe6284c7b334accf86015dd3a838e8f3090f0a914ef4cfcd65e7aa6057d2ca68106de673c69873524d0ae6fff0c33ba55d4d00a37d9f5c7e96b6cd444da75d6447215036a5fb25b0f594fbd0d0dd6bfb776e59024b338f07f02a06aaacaf1378d5032649e6b7d5202612ebad8acc3245d9407803771df4e37ca2298c529117b6c9cb721c0e4f0ec236eefa316d9e60a38505c638a5713d5429619caee242d225a5521bbb565958cf1921bfea3d26076fe5125488b60f938e83f0061f04336d2e61af50a5f8083052af45cce7eaf43ff4974914048d73e7e74037b22c09cf71df354c292c1ec295a627fe5241145e0c4b237c80da462b046095f3d6b6ba05650da7b36eb8bfa3891c66c96ebb815424e28ffc8c528a678953e732005287ffa9f907fd740747a6fad15a01dc29e514ce8f4e373d8445bf99a209f25e5d0bf96e3e214584c5bdafafdbb00ebca2db2c3aa72a700818eabdd91dd0ce95211a09b6618a9080fdc3cc295e84496f9e4bf2ea3b89dddbd9134071e5fb46168027e76401aa0f7a26ec7de331c98e75febde51fb1e21a989e240dc71ca9a0b161db53b225d3c5a77394601c094d5b350550717f16ace7fa422c8f050a3afc2daf12ec02000a3231a9e43e1e2e06886fd30bdd71993b8945b616f3cfe53f6ad37e38d18599a1b9db23a758863b25173b443d040695efea21343507ac8e41c3296dc9d13d0ca9c1d7bc77b45c67fffe8ea8dedfb8c66074024da46cd9ed4db8f1256ac4b4ac5ff0a5dd05a72c276652653073e3344bf2db97c969aedecbaa2da286e1a94c84c3f1addb667a9134d0b62db1a34c8ca984b0ef232301ea198e2e8080538a403809ae38bc4d978c5f1f2da23e5a03fdbf709422cff292998f462ea9c670165bfaa96f51a2728793bfefe2450643628cc14faab3f8c548fc79e897d2c3a61a4967d232503d9949bdbcb0a471813e474f29932dc8f2a624680d335406e2b464ea5419d331e0f902b02c1c26a9b77b4531db408235a8c6d9229bd02f14c26423943a64ada5530524b506d4399b411c99750a9e67f18094e4adb09cc1c51e870f2aabe80aa6778e8dd6c6b000ae6694d140231ffd4a8ecb0b42df57061d92dc4c0d1976b119fa55d5be8832199fdb1aa9b94bf573f53351ec8e6d5f197e6fffe5c369971c07b68cfe5406cafc6fb7e4edf46f0143cbf3076bdb2628a66ce7b60859345df268afc7ac1e50e3fce902d4786ccf359600c323d6eb749220802a3d03fc05bde59c6a76ec64f49022588fda3fa5aa32e7f396620c299cb14e3f5100b1a1ae06d37070a77524ad87a43aadefe1c173d7db4a3bfa73678d8b46c68c8bf5a9d9ba142a8bbfd083ed56a3f252d49ea07432f5ad45206be7ac7232a6d09ee047dcebbba92226aa0beb29462ed1a784d47654fc4cca60cd405ea6859b7794cfbe48d045db85e1b1eefa0bd2c716900626d792e24cd307949711c2ddb0c05397d14b5650a62fcdea394867c7d9296f4de548a3bb672fed25bafdf30697d7ac9f435b04d0979c8cd728b3849a5dbb74057ab354b9503cbe398d96caf36a398822fa9e31d9ff43a863d2db25b64f4bc66ecfbaa860400d1ba0996b08d42254c78825ccbfdb74056a50fe52c6f850f30d714fefe055ae051854b80e2133a8393826c3689bdfc25a11f341f952deffe29d8c5b255ef6f79372928fb2db08258d382f1acb22109797d287d386bb2d84209088b41a6edce41d1e595fc91b006a636830994ae3839720ccb32ad78eb839ea332ba196869fb36e6a2223f383fc09d4ecf1eba7a8a539e5141e89f1031807dabee4f85275983881aa49be224e11b47b7b7a5a3faac3c346d5b7c0b3386c952c06847212ce8cf96d09f08509787c893e4d038749f6490f6d54a32b8f378e47b47122aae1c3f5512c803987c4754ab8e4cb9fb063bdfa31dfc995ff3d97785aff0ac945199b7b67cb4eea432ae143482b97d488456bc25b96e2da28cc85a7b03cfe80d41a40b50fc5f2f8bd5d6b446850d8d1dbe70be70b3a036d5b830a91ea8d272c96c4ac67d3c9c5ec1a69a0bfc6b6ebf7c0b918c7a5be4091e273afc50af906a5ff4f6122d4ba6ebefc65a73b58c2248c8d72ff0a465a0a824ef0eb738f44a20edacc31d71af92df54fdc25ce0a399cd5d9a86af6105be48ecf", 0x1000}, {&(0x7f0000000200)="aaf9b5ae65c382f3e034597bab1538caa592cf67bdb366a024f8522d3715c54163891a1cef8c355809e3b2bd6332e6df3d340c4d605dcd77ae1f1714dbaf4fa64e31c2217adc4642136f3a9502d215d306dc842f6a7b279e7b32dd6e3493973c6148eaf17643460ace397361a6c21b4839ad96dc159b6a42ab35b58733aaf1ba6db8787c1c2b01d3f249bb9dd81cd31c7f5cdc41dbd8ebd7519b9c1aac42f8c800dc5552842fa15c23ca749104257675ca73b022cac79dacaa7b2d97c7", 0xbd}, {&(0x7f00000002c0)="0a8c24bab1691a58d4c15edafdeb47d119d1822b71bf2ad5283e0a6c10c35ef72e6633747c6dc7ad105fafc291702394adc76b667775abf4312bec6eefa2bb25b0a7c6f8fb389e618983ed7340aab4bd4be228cf7987d3198ab3bc2c026743bdea351b84812b8f4abd4252b1f652162fa5ccb9b366d210cd78d596dd94f2eb1fc9705faee4e7fc81e618423b085fab597a3a22adc822818028278ec48706eb1cadc4c07c81e013601f257c9c9082a44bb7ddc3453121070951a3f03314df2eb1743f3208eee32764b0b4253b91ab277bf8babc00c61375104046ede72c0faa1ad1f07e87229ece3d03d1d424df228d", 0xef}, {&(0x7f00000003c0)="7c06b6412ad23bed5f73ce9b9ed174d53cf63c66420577f96670c1a883681aa261ad001d2b76efb69b87a78293f70e17525646b174399b1a37c8c97b07c64706370f5b8755d3e814cd0a469c010d22d5f4012b23dc7fbef71807d7906281db9c9f87b214ff441fca14d0e6ef70bfb75187281edbaaa7d4f871b892a9a29b7f0fc2a8f68136d6a4c7c5a0a1e2c6a57448da938098aa2ac6a5cbe6b9b9c0f559664639564edd0dddcaa612e7a11d565230e988704a1561b582a339d9c0d091ae7d2c7e30e88137597253b3b1", 0xcb}, {&(0x7f00000004c0)="d4d2f9b2d2667910", 0x8}, {&(0x7f0000000500)="5466fabe6be5818d9366bc5bd684c8c901eae15175acbadb36dc0c5688807bdcefba41e2b0f75620e902493d4a6fe14008b7765eeef998bcf24afc4cf90caf4e0535eae3d77e0ab15191a6a9ee3b2c81991bb363f020931e7ed901f11dbfaa53", 0x60}, {&(0x7f00000017c0)="9f1354eb582e2f3189c5d43734e30bc24308a39d59bb3ffde4be71bdd8f922345c9d9cfce363e4639ba5d130bd11cc80d2f8bfc9c9cf87fbeb8edf460080000000000000cc6dd3057ea412bc2ec18991397df9e749b149fdb6dbb1d2e6df65817bf0a0d101b3833e16bd2e4736548a561cc177746de0ae51092b8cdb56b313bb8975de719c1f9f7ffe7e6563126bd9eb20b73444dc9d4812619cee7da49911efa00c2a093deca5638334631a29f36c14329a555bad8526a4aa745d93ef3cf6b78abb8ee18ba55c1352906744e073c9da4e6d5aac34d5c68ae5cd6b56b6225f348336718d0d02acf34d946c99a851753ddc62b569a333642f9936cbf913629520f52a13eee03ad1e3", 0x108}, {&(0x7f0000001600)="e7bd9b5e68387b0062104464a01571eea5a11d7dbac6ca01adaabf323e7aab234a47511a87dc452f717a633e41ee00000000000000000030e40000000000", 0x3e}], 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 764.113076] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 764.127344] overlayfs: invalid redirect (./file0) 03:39:55 executing program 5 (fault-call:6 fault-nth:15): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:55 executing program 5 (fault-call:6 fault-nth:16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x3b0, 0x0, 0xc8, 0x3b0, 0xc8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x5, &(0x7f00000003c0), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 'ip6_vti0\x00', 'geneve0\x00', {}, {0xff}, 0x8, 0x0, 0x10}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @empty, @rand_addr=0x8, @port=0x4e22, @gre_key=0xad3}}}}, {{@ip={@multicast1, @broadcast, 0xff, 0x0, 'ip6erspan0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x2f, 0x0, 0xc}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x4, [0x1, 0x4, 0x3, 0x2, 0x2, 0x7], 0x0, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @gre_key=0x8, @port=0x4e23}}}}, {{@uncond, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@dev={0xfe, 0x80, [], 0x2d}, [0xff, 0x0, 0xffffff00, 0xffffffff], @ipv6=@dev={0xfe, 0x80, [], 0x2e}, [0xffffff00, 0x0, 0xff000000, 0xff000000], 0x4d5, 0x3501, 0x11, 0x1, 0xa, 0x18}, {@ipv6=@rand_addr="cd66e54de14b816e95b550b28f0bb129", [0x0, 0xffffff00], @ipv6=@rand_addr="df5654f83dfc6a0ea82db89a5168a95c", [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 0x4d5, 0x3505, 0x11, 0x0, 0x4, 0x18}, {@ipv6=@local, [0x0, 0xff000000, 0xffffff00, 0xffffffff], @ipv4=@multicast1, [0xff000000, 0xff, 0xffffffff, 0xff000000], 0x4d3, 0x3505, 0x3b, 0x0, 0x10, 0x8}, {@ipv6=@dev={0xfe, 0x80, [], 0x2c}, [0xff000000, 0xffffffff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, [], 0x3d}, [0xff000000, 0xffffff00, 0x7f800000, 0xffffff00], 0x4d6, 0x3501, 0x29, 0x0, 0x13}], 0x0, 0x4}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1df4a668abbab355, @rand_addr=0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x7ff, @icmp_id=0x64}}}}, {{@ip={@broadcast, @remote, 0xffffff00, 0xffffffff, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x11, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @gre_key=0x1ff, @icmp_id=0x64}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r4, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="cf8dbff3774e6e66733d576f6c655f726f2c0000000046c3552cbb2527deac07d62c6b7c454f26732df2a679b2a1d9c79d7e34401fdc4f7ff16007dc607d78732eb5d0bc39c7cc9e8b21f4f45cc8473c2f0074385149f0e5b29103d6673de7c6c9e2930ac8cba609c0b120f58a505f1536b2a346cab5b5c0ad1a9221c58f1f26c4040db97437d633d09fa184cd6097798ba0444859cb308eb8b9019d1dfc72e4a5"]) umount2(&(0x7f0000000040)='./file1\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x1) 03:39:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 764.140949] FAULT_INJECTION: forcing a failure. [ 764.140949] name failslab, interval 1, probability 0, space 0, times 0 [ 764.140961] CPU: 1 PID: 30575 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 764.140967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.140970] Call Trace: 03:39:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x3, &(0x7f0000000280)=[{&(0x7f0000000140)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}, {&(0x7f0000000080)="9e2a612d24cdda4060373b81533ba76acb2f7607d7dfa0ae4414b8bfb68282dd4493c10d833b4bd13e4516c5b0736c93e49ba4c0ab95", 0x36, 0x4}, {&(0x7f0000000180)="7fb2c8f5acf3e1677acc0cf30f4dea65b5703ffeb315fc1e412316fcf008d50bab876953f783402d7486a536f5e7508fb266af84c1f9bf42744ca9d6492977aa951b220695eb97f3485694346f4da527c0489441b3c2ee45043377d7c8290ef0545db1b43d181689134c6e0dd1b908b43c753581498eac42faf94c8dd458fec94a76ea5d585dce198cf3920f14db67a74a383d82d0f36a6e56d0e4b5ba1cf39c712f2408992e2efd2ad5f82487f1a061e8a465fb132432c95703ff27f0a91afbdfff90118cbc0f4512702b6c5e89b57b5cd19a61afca64534f6003908ee848fd02f1fa6b57a5d8d8f724", 0xea, 0x6}], 0x0, &(0x7f0000000300)={[{@dots='dots'}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 764.140986] dump_stack+0x13e/0x194 [ 764.141004] should_fail.cold+0x10a/0x14b [ 764.141019] should_failslab+0xd6/0x130 [ 764.141029] kmem_cache_alloc_trace+0x2db/0x7b0 [ 764.141042] ? fsnotify+0x1110/0x1110 [ 764.141055] ? inode_has_perm.isra.0+0x1d0/0x1d0 [ 764.141067] ovl_dir_open+0x7c/0x240 [ 764.141085] ? ovl_fill_merge+0x930/0x930 [ 764.141097] ? security_file_open+0x82/0x190 [ 764.141114] do_dentry_open+0x732/0xe90 [ 764.141124] ? ovl_fill_merge+0x930/0x930 [ 764.141135] ? __inode_permission+0x7c/0x300 [ 764.141146] vfs_open+0x105/0x220 [ 764.141157] path_openat+0x8ca/0x3c50 [ 764.141177] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 764.141196] do_filp_open+0x18e/0x250 [ 764.141206] ? may_open_dev+0xe0/0xe0 [ 764.141224] ? lock_downgrade+0x6e0/0x6e0 [ 764.141233] ? do_raw_spin_unlock+0x164/0x250 [ 764.141243] ? __alloc_fd+0x1bf/0x490 [ 764.141256] do_sys_open+0x29d/0x3f0 [ 764.141267] ? filp_open+0x60/0x60 [ 764.141278] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.141289] ? do_syscall_64+0x4c/0x640 [ 764.141298] ? do_sys_open+0x3f0/0x3f0 [ 764.141309] do_syscall_64+0x1d5/0x640 [ 764.141325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.141333] RIP: 0033:0x45c849 [ 764.141338] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 764.141348] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 764.141354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 764.141360] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.141366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 764.141371] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000e [ 764.233773] overlayfs: invalid redirect (./file0) [ 764.233901] FAULT_INJECTION: forcing a failure. [ 764.233901] name failslab, interval 1, probability 0, space 0, times 0 [ 764.233913] CPU: 0 PID: 30588 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 764.233919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.233923] Call Trace: [ 764.233938] dump_stack+0x13e/0x194 [ 764.233955] should_fail.cold+0x10a/0x14b [ 764.233980] should_failslab+0xd6/0x130 [ 764.233989] kmem_cache_alloc+0x2b5/0x770 [ 764.234000] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 764.234010] ? ovl_dir_open+0x7c/0x240 [ 764.234021] ? rcu_read_lock_sched_held+0x10a/0x130 [ 764.234033] get_empty_filp+0x86/0x3e0 [ 764.234044] dentry_open+0x5a/0x210 [ 764.234054] ovl_dir_open+0xf0/0x240 [ 764.234061] ? ovl_fill_merge+0x930/0x930 [ 764.234072] ? security_file_open+0x82/0x190 [ 764.234090] do_dentry_open+0x732/0xe90 [ 764.234099] ? ovl_fill_merge+0x930/0x930 [ 764.234113] ? __inode_permission+0x7c/0x300 [ 764.234124] vfs_open+0x105/0x220 [ 764.234136] path_openat+0x8ca/0x3c50 [ 764.234154] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 764.234169] do_filp_open+0x18e/0x250 [ 764.234178] ? may_open_dev+0xe0/0xe0 [ 764.234194] ? lock_downgrade+0x6e0/0x6e0 [ 764.234205] ? do_raw_spin_unlock+0x164/0x250 [ 764.234215] ? __alloc_fd+0x1bf/0x490 [ 764.234230] do_sys_open+0x29d/0x3f0 [ 764.234240] ? filp_open+0x60/0x60 [ 764.234252] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.234260] ? do_syscall_64+0x4c/0x640 [ 764.234268] ? do_sys_open+0x3f0/0x3f0 [ 764.234278] do_syscall_64+0x1d5/0x640 [ 764.234292] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.234300] RIP: 0033:0x45c849 [ 764.234304] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 764.234313] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 764.234318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 764.234324] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.234329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 764.234334] R13: 0000000000000771 R14: 000000000050437f R15: 000000000000000f [ 764.259460] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 764.377316] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 764.387111] overlayfs: invalid redirect (./file0) [ 764.387260] FAULT_INJECTION: forcing a failure. [ 764.387260] name failslab, interval 1, probability 0, space 0, times 0 [ 764.387272] CPU: 1 PID: 30600 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 764.387278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.387282] Call Trace: [ 764.387299] dump_stack+0x13e/0x194 [ 764.387315] should_fail.cold+0x10a/0x14b [ 764.387333] should_failslab+0xd6/0x130 [ 764.387343] kmem_cache_alloc+0x2b5/0x770 [ 764.387355] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 764.387366] ? rcu_read_lock_sched_held+0x10a/0x130 [ 764.387380] selinux_file_alloc_security+0xaf/0x190 [ 764.387390] security_file_alloc+0x66/0xa0 [ 764.387398] ? selinux_is_enabled+0x5/0x50 [ 764.387408] get_empty_filp+0x15c/0x3e0 [ 764.387418] dentry_open+0x5a/0x210 [ 764.387429] ovl_dir_open+0xf0/0x240 [ 764.387437] ? ovl_fill_merge+0x930/0x930 [ 764.387446] ? security_file_open+0x82/0x190 [ 764.387457] do_dentry_open+0x732/0xe90 [ 764.387467] ? ovl_fill_merge+0x930/0x930 [ 764.387477] ? __inode_permission+0x7c/0x300 [ 764.387490] vfs_open+0x105/0x220 [ 764.387502] path_openat+0x8ca/0x3c50 [ 764.387519] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 764.387536] do_filp_open+0x18e/0x250 [ 764.387546] ? may_open_dev+0xe0/0xe0 [ 764.387564] ? lock_downgrade+0x6e0/0x6e0 [ 764.387576] ? do_raw_spin_unlock+0x164/0x250 [ 764.387587] ? __alloc_fd+0x1bf/0x490 [ 764.387604] do_sys_open+0x29d/0x3f0 [ 764.387615] ? filp_open+0x60/0x60 [ 764.387628] ? SyS_clock_settime+0x1a0/0x1a0 [ 764.387638] ? do_syscall_64+0x4c/0x640 [ 764.387647] ? do_sys_open+0x3f0/0x3f0 [ 764.387659] do_syscall_64+0x1d5/0x640 [ 764.387674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.387682] RIP: 0033:0x45c849 [ 764.387688] RSP: 002b:00007fa6f8b45c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 764.387698] RAX: ffffffffffffffda RBX: 00007fa6f8b466d4 RCX: 000000000045c849 [ 764.387711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 764.387717] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.387723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 764.387728] R13: 0000000000000771 R14: 000000000050437f R15: 0000000000000010 03:39:58 executing program 5 (fault-call:6 fault-nth:17): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=nosta|e_roC\x00']) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:39:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r5, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x6, 0x8001, 0x1, 0x400, 0xffffffffffffffff, 0x4, [], r5, r8, 0x1, 0x2, 0x3}, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) vmsplice(r1, &(0x7f00000006c0)=[{&(0x7f00000002c0)="7bf1a3ff2ac557a405a2605d218dfc63eab7b791a489d68c58e7be4144278a1620ec8cc0aa4adc462016d06ff77341aa7f7f03a9ae6b6c9293da1be9ec0733e66bc38f7eaa55336e7e2f59c0d6faaea97edc72935ce372969c990e9c536d7018e497e838e71e28dc449f01173291a6e75b2532c0af61fb159d1c26b4033f6c07264c761516a1ee584a537391beb07ea4e69c4a69f14baaa0f0227f709f9dec010504db60d4b1fb77f71eee7712642f017985955bcdad3981c1d94bc81d3bc7cc9d", 0xc1}, {&(0x7f0000000440)="2f4d71ef7a467f51d2c2bf0f3747747a428f7c4f043c84f455b249bbf2228eadc92cfec587f41b7cd6a6c3debc4875f012f357b0e9414e00d823f4c865097be1378fa4756620b16dee940cddf3e4effb8dfc278b7e87936d12485cffe6afb5e489a3f83489139b2389ac51f7854df9082ed89db55c105544a5a499c4140437fbe6bafef81391d2c025348230b07154eee768718caa2422b28875f42520575e2a6b0d1dd9491357e8636fb2f75271b5d3b61b1b101f8bd13b5c859ff050a97ee279b11e8db3378371ffd6c9403601adc562ef39461496c029de8578b7474a4431382f3e2441097f66d5446b51de9799f80b8490c2088734fbce", 0xf9}, {&(0x7f0000000040)="e8479a024e4e52bdb09956760a1c3ba44296070c4d0a972ac2a17131a96eef073b4b53ff0baf1637", 0x28}, {&(0x7f00000000c0)="1d36fcd16499ef1542c5e04b60b48a8fd6ba8592003d9ea9b1dc2d16185c44d62ff8ff4be6a3a524d813f1665b69b30e55b69a5b73945f8a8ebf7a0812b1", 0x3e}, {&(0x7f0000000540)="dfa08b9f07d9869c5a47e128c6c26612a6fe9c2ff73542179d3c1d569cfa743cf70d157e6d56b75f1ec7a609dcc5909d6208f5fe2153707fb33f0d772f0a81434085d9deddd7e803b3429975c108549b10ee85d2e4de315f1e93623b27effbc9ae9e2f1f7054522c4de544b268ce20707933bc3403c57f581b965e", 0x7b}, {&(0x7f00000005c0)="5797248d2ef693badda014aac6dabe50a5d2d3465c50e8c7cf81173461d562099f678c7447a24e1b0849644a64efd9d64e5ab6772461f1b9ab1dae3b62e27e36332fe12812d6a385b4454ab550075a5327ddbb23fed6687550eaf4c058437fa302a13bea870c86d2f9765e15afd7", 0x6e}, {&(0x7f0000000640)="f36bbfcce8e6bc9e542685e0e1", 0xd}, {&(0x7f0000000680)="e01776a992", 0x5}], 0x8, 0x1) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff}, 0x0, 0x9c}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000980)) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c727f6f746d6f64653d30303030303030303030303030303030303030303030302c757365725f69643d39e74cde58433b8e46a4fc646ca558b467c08d2208db9920df0c19b34e4ef2e449ad328410ee15380942863eafc19e9b869c334480613445fced6500984bcdfd81fb83d817265d484e307fb75a629e7e0e0ce78277783fb6ed7489dabc73acb0fd222774dc6e026e666e848361cbb49ed0018213705420d548c5b1d26071481e180fa6640000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xe) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:39:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 767.168543] overlayfs: invalid redirect (./file0) 03:39:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0/file0\x00', 0xe, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080)) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:39:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 767.193118] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:39:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$isdn(r1, &(0x7f0000000040)={0x22, 0xe0, 0x40, 0x5f, 0xff}, 0x6) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e66623d6e6f7374616c655f726f2c00f74c079282a619a910d68ca99965e36c497978a97be00cf108f5e77b32faab050000ddffffffff641e246a9946c40bb8c7bb42167c13ba51c76e437a8e49ce1e76627a9d48b47e2fbaedd55cf908d3aac540fe49813d92c5c29885619898aaaeab69d4bd0c9d9dc47c441b506f35d848f5c00f6e8ff04f339e8d5b9984646df5e8275964e9f076614892f999e5b966608a97a0ae18"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000200)={@remote}, &(0x7f0000000240)=0x8) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:39:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RCLUNK(r1, &(0x7f0000001400)={0x7, 0x79, 0x2}, 0x7) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000001440)={0x556, 0x180, 0x480, 0x78, 0x7f, 0x1, 0x1, 0x1, {0x3, 0x9, 0x1}, {0xc92, 0xeb}, {0x88bd, 0x6, 0x1}, {0xffff, 0x3, 0x1}, 0x1, 0x2, 0x8, 0x7, 0x0, 0x3, 0x7fffffff, 0x2000400, 0x339, 0x1, 0x80000001, 0x1, 0x1, 0x200, 0x2, 0x3}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) writev(r7, &(0x7f00000015c0)=[{&(0x7f0000000040)="67bca63bc52228a50382aa36", 0xc}, {&(0x7f0000000140)="294adb3597d8b2088fdb75a2f8f7f1f0472171fc7af8fbef349609a78ce3b2bd056ea41e925f152d9f2eb32c61fb8d86d91cfa456a47a37678733536d5c7b4711f981d2a363098a464a287ee75c0539bc017c9852baf85c22ff0d3ed021cb56bc312ecbfd965a2b129840d357fe53de1ffb6dc5a4b3dbaa43c6b962bc00d019a", 0x80}, {&(0x7f00000001c0)="ed7ad6fb5d22ba86a4b7964fa1b752bf309b548decf8460ee1b9fc317452b14d6a98484769296e86a34f00ddf541ff54c4183252f5af4a5720e09ec89206202b7d18cdad68489b4f87abbb98f5a7ea9690bcb4619e627d3fc76d4062e7a3279330edaaa9e1749d2075e295f3447e7e3cd67b797c56023b30951d3405861a1ef0c7b5d4149c93566f353e86e0c03ee0623205fe5ff5932c68fb054fef0d7622fe347c07b932dfdc5e37626aae267999550def3098be3367d0e4d3f7fcf63550b5d914bcba515dff8f0a707235def1de288c", 0xd1}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="92fdc4982afe6c76cee4214114bb45e4828153717605638511f8fb055df4d3318d52a743fa17b9366334a458c14d2d1d6f9d91ad88ee82879f9df178aaf7942af5e55406933cdab99e68e7ee0d1d33da9b376eed173a832f43f32942a3e91f127e4789bfe045747bff9a54", 0x6b}, {&(0x7f0000001500)="f31c41052a45ae17204a01b2a2a887488f521224cefd208930c280ff9ad4212abc14575bebc21151798faf58f9f57593f0cd59d62fd842e4961178ac443a2ab3f4191a8335cbb25317d9442d664b82efe0c90626ae35624cdcef38d4041e00d859e88cd3a8852c94a0e0bc5a66ae4a31499e07c1fabeb7937dc07757aed91e3d0ee0daae5ee62f34195d598a9800d62b4f5873493c5d8173419f9345363ee8a792c334e1e5519309f8f9", 0xaa}, {&(0x7f0000001340)="c554750ca7a91133618b54a0e5e8ee3a10c6997f", 0x14}], 0x7) 03:39:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000380)="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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000140)) 03:39:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x7) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x3f, 0x1f, 0xc8, 0x4b, 0x7c, 0x22b, 0xffff}, "c705e56e5558d04d73a93a4f27ee33c5e2c50d4b7ee97aa1d906f04e03eb496a3517d26df8cd030445754068a89eea84dd8c7f581cf17dca6cc216c42fcef73fb0aece00842cf6590e96717111fd8518402bd526de8a05c645235a55751128a9fe604103cdedb7cb45e68d4af1376933995fa0b94755e86f428b74a4ddbdf8d87280e1f94614e828773e406f10e1fecc", [[], [], [], [], [], [], []]}, 0x7b0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 767.302162] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 767.339117] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:39:58 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 767.465308] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 767.514613] overlayfs: invalid redirect (./file0) [ 767.534848] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 767.830259] NOHZ: local_softirq_pending 08 03:40:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in=@dev}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x2fe040, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) dup2(r3, r4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0xaa, [], 0x1, &(0x7f00000004c0)=[{}], &(0x7f0000000500)=""/170}, &(0x7f0000000640)=0x78) 03:40:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x4) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x82040, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x40140, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x3b31, @mcast1, 0x6}}, 0x40, 0x795, 0x9, 0xfffffffb, 0x3}, &(0x7f00000004c0)=0x98) fcntl$dupfd(r2, 0x0, r2) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4) write$P9_RWALK(r1, &(0x7f00000000c0)={0x9, 0x6f, 0x5}, 0x9) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0xc000) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f00000002c0)={0x7, 0x7, &(0x7f0000000140)=[0xffff, 0x81, 0x2, 0x5, 0x5, 0x7fff, 0x7ffb], &(0x7f0000000180)=[0x401], &(0x7f0000000200)=[0xf10, 0x1ff, 0x4, 0x64f, 0x7, 0x5, 0x6, 0xfffb]}) 03:40:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x4cec1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)={'syz0', "60bd62b4ac4ec0551322e07894c01675a16f6b706a732ce1100d2a325455e22542e7bb0c913df0fc740f3b42cec00d82036fa0246aa46fc06df1d8294b1caca1997540f5cba942ad53adaccea0bba53aa647655eb04c89aa870d2428d7e54b74993d1c9679907d91398291016dec0389b379f1a1eca119d3d00c3849416e8e48051b7aabdb96f2b778107e517cd16f6dc93cbc0ba76293d6058d8e49b95221e8386653b2a43c0bdc47d280f3c79e55f944b3293155d7839f00f50902db53fa0c7a842a8fa6979ad8f4f82176c5403b8bbd728a72609f764318bc5d47cd8d1fde6e6d26f0b5a1a1125e258e7ac7a8fe5d"}, 0xf4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:01 executing program 2: prlimit64(0x0, 0x8, &(0x7f0000000280)={0x9, 0x8c}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffd8556ef7f9c24c691af8216e1a8c60eaa8379ecb9ac73e776a77f844b99a6f81f3321e8cfcffe9715249ad83dbb609a69e42a5649e4491941bc6037766a24c7dfea13b431f29c899c0e4b94592b07cca63e473fd140ee710a9e8d3995ee62279a6eb9457205496a63037d1352149d1d686c6af8eb4c2556860c614c4537e650dc85833a8784420a290fb", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0c005b05fd85af11c0434b6cc1e8be87b6ee0a9c6f6ec2e942b621f0e23e29cd277d43911383f057ccaa279ba56a67266c9fc6111e2ca9dfa622e82315ee120238b08109066b22bf48110575218363"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) [ 770.208449] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c3a6c002400000010000000000000e826"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x7fff, @dev={0xfe, 0x80, [], 0x3a}, 0x0, 0x2}, 0x20) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') close(r0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getpeername$inet(r4, &(0x7f0000000680), &(0x7f00000006c0)=0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$getflags(r5, 0x40a) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2c0001, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x19) rt_sigpending(&(0x7f0000000140), 0x8) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 770.346723] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:01 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x2}, 0x16, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 770.410538] overlayfs: unrecognized mount option ":l" or missing value [ 770.417557] overlayfs: unrecognized mount option ":l" or missing value 03:40:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 770.544925] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 770.544984] overlayfs: invalid redirect (./file0) [ 770.549000] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 771.031718] NOHZ: local_softirq_pending 08 03:40:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:04 executing program 5: mkdir(&(0x7f0000000040)='./file1\x00', 0x59) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743124776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e300002000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000004000000000000000600000000000000000000000700000016564500000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) r5 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001640)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d3690000710000003ad0c8d9c9f9e3a77ec55d2a5ff847b4810371d31c2f52ada38e5f72516946158bf1fad21eb3f4665ce2c7df15cb15deb4c39539d6cbb2588493f1b229a45b47bb7850fdbd8bf9c5dbf5e03a7a1efe45802522fb0d0855a7b9723eda54adad842521801fb3aad47c71f359c3622a30cb8df02c", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) r7 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x9}, {0x8, 0x4, r2}, {0x8, 0x3, r3}, {0x8, 0x0, r5}, {0x8, 0x1, 0xee00}, {0x8, 0x1}], {}, {0x20, 0x4}}, 0x7c, 0x2) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = msgget$private(0x0, 0x44) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000001c0)=""/98) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000280)=0x4) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x16040, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x802, 0x0) connect$netlink(r3, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d400", @ANYRES16, @ANYBLOB="00080000000000000000250000000e0001006e657424657673696d0000000f0002921a3fd37972c3bf696d30000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000008a00", @ANYBLOB="0800010070636900110002003030303009550124333116068254c0a1d7181a3ef678aec322b9f03a30303a31302e300039000008008a3df57b85efd342e0b1b8d303ec20db819e68d8f7b667b2ae00709287723a99feee0215a6a19c77539551711cf636e01e115b1bd6", @ANYRES32, @ANYBLOB="0e2c8aa8de57086c741f03e9c2225f6c8c4d653ed617083cab79780201006ef50719b001eed547dbf20f2d0057000f8a910dd7d07861f039", @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x24000080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x6ba05178185ad103, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", ""]}, 0x20}}, 0x20004001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f00000002c0)={'security\x00'}, &(0x7f0000000340)=0x54) close(r0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x43e002, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) 03:40:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xfffffffd, 0x3, 0x0, 0xffffffffffffffff}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x110c804, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="909dd6372382259695001eeca38407d93b34a6fd3917b221fff9e55193af43c1447f0700000000000000a32e0e44ee0629092602996f3b275744762488f722ee1e89930f887121cfec2fd88ff37f0a2a56d9eb64726ebf0f8c52ce6dfbcc60b541cc1fab8b47a021f20f83ccf1153ae83c4048be9cf3da10180067a69c3f9b964aec69076cc1", @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 773.292704] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e66733d6e6f7374616c6573726f280012c401ef678f9cf8e3d0c48692088e5e013cc3fd365c2654caaf911accd1da02d765c55674f43a1c30f0110da970800d8697177eb1b8f86162f3702dd0afb9952ff039bcbd139dcfe26e4064640ed93a46bfc59113b986da7b4ecbe360192a306aeb2084be6f12fd720260230d2085734566e041cef55c247911fe1ccb94549631ba"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$bt_sco(r4, &(0x7f0000000140)={0x1f, @none}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0xaf) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={r2, 0x6, 0x1, 0xffffffff, 0x4, 0x1}, &(0x7f0000000240)=0x14) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, 0x50}}, 0x4000000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x1}}}, 0x84) 03:40:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x800, 0x802) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0xff, 0x4, 0x1f, 0x8, 0x1, 0x1}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) r3 = dup3(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=~ostale_ro,\x00']) umount2(&(0x7f0000000000)='./file1\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x86840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$AUDIT_TTY_SET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x2, 0x70bd2b, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000180)={'macvlan0\x00', 0x8, 0x5}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={'macvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) write$P9_RGETATTR(r1, 0xffffffffffffffff, 0x0) 03:40:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x26b0, 0x1000040}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x3, 0x3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffa3) [ 773.460205] overlayfs: invalid redirect (./file0) 03:40:04 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x76, 0x8, 0x10001, 0x1, 0x7fffffff}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 773.486778] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 773.508520] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 773.607632] overlayfs: invalid redirect (./file0) [ 773.615897] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 773.625777] overlayfs: invalid redirect (./file0) 03:40:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0xc) 03:40:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101a41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:07 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x20) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24020000}, 0x800) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdhr=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(r0, 0x0, &(0x7f00000000c0)=0xfffffffffffffe27) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) 03:40:07 executing program 1: semget(0x1, 0x1, 0x100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x40, "c33822e95d8bf0eccdde9d48814fced50a9151247257ff89215c67cb2526494cdc9c9028d42761773a60ec577c6af27ceeabbee2190a6c1f3c4e98d91a8f9241"}, &(0x7f0000000340)=0x64) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=nostala_ro,\x00']) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)=""/237, &(0x7f0000000280)=0xed) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) futimesat(r4, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)={{r5, r6/1000+10000}, {r7, r8/1000+30000}}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 776.354890] overlayfs: unrecognized mount option "lowerdhr=.:file0" or missing value [ 776.361325] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 776.401308] overlayfs: unrecognized mount option "lowerdhr=.:file0" or missing value 03:40:07 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000)=0x2, 0x4) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=`ostale_ro,\x00']) umount2(&(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x8) 03:40:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0x3, 0x1, 0x5, 0x9, 0x6, 0x8, 0x7fff}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000140)={[], 0x401, 0x2, 0xf9, 0x0, 0x4, 0x3000, 0x4000, [], 0x3}) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x8) [ 776.503594] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.535827] overlayfs: invalid redirect (./file0) [ 776.568157] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000000ba245600080000000c0001007463696e64657800200002001c000700180001000b00010073696d706c6500000400028004cf4c31c826bb2e62b3bbd1a4062b75b89e883c53c557001a7651a8b081316337eafbba18597c8c45e4577c66a45be2bedaadbc317146723571"], 0x50}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ec3e4061b06f3982eb8d14eb38cbcdfeff0000008fda3d1f5517612fb15e0d524bf3b69e664b86c01e5ee4864b03c6a9c869f67acc0b9ef077bba683667a05bf5987320d6f6a4798faf97d2fe95e67a5f5e3565733106181040f8fb46bc8d598b2607d55ca2bf9949ff14dda4ee8490ab52443c24f91049696daffa59b89021e3656bd67dc069821a17ce8c1f1a4cf47cbcb247b4aa2022eb0c623adb691e1999be575b313"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/105) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) renameat(r1, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') io_submit(0x0, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 779.387233] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 779.425899] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value 03:40:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17, 0x5}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000140)=""/182) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:10 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 779.456754] overlayfs: unrecognized mount option "ÿÿÿÿ" or missing value 03:40:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000003c0)) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "c6d2d2d5126bfaa8", "16790fffbc69d47b6825a868521401de", "9e054577", "8a4e9c7555979ae2"}, 0x28) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)={0x175c, 0x0, 0x5, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x1}, 0xff, 0xfc, 0x5, 0x5, 0x9, 'syz1\x00', "c0b9067b79039752b763e105306f228a8d42b1c5ff130127b8fed22b87976a75", "b595c4f3eed2bae9a2343f1a84c79e832016318c067d5577f7ed241a29750390", [{0xbc, 0x400, {0x0, 0x6}}, {0x1, 0x4, {0x3, 0x7}}, {0x7, 0x100, {0x0, 0x6d}}, {0x8, 0x1ff, {0x0, 0x6}}, {0xaada, 0x400, {0x1, 0x3ff}}, {0x4, 0x40, {0x2, 0x7}}, {0xc0, 0x7, {0x2, 0xfffff781}}, {0x5, 0x4, {0x3, 0x80}}, {0x400, 0x1f, {0x2, 0x4}}, {0x4, 0xcf, {0xf409fe1cb171939, 0x6}}, {0x7, 0x1, {0x1, 0x79}}, {0x1, 0x3ff, {0x0, 0xfff}}, {0x76c, 0x6, {0x2, 0x101}}, {0x0, 0xcbb, {0x0, 0x101}}, {0xd38a, 0x6, {0x3, 0x7}}, {0x3, 0x3f, {0x1, 0x2}}, {0xfff, 0x8, {0x1, 0x2}}, {0x0, 0x2, {0x0, 0x3ff}}, {0xff, 0x0, {0x1, 0x4}}, {0xe2, 0x7ff, {0x0, 0x8001}}, {0x7, 0x0, {0x0, 0x1}}, {0x7, 0x5, {0x2}}, {0x7f, 0x40, {0x1}}, {0x8001, 0x8, {0x2, 0x9}}, {0x401, 0x0, {0x1, 0x6}}, {0xfc14, 0x91e, {0x1, 0x3ff}}, {0xca, 0x8001, {0x3, 0x101}}, {0x8, 0x7, {0x3, 0x3}}, {0x7fff, 0x8000, {0x2, 0x6}}, {0x93a2, 0xc8b3, {0x2, 0x1}}, {0x1, 0x8, {0x0, 0x6}}, {0x1, 0x719d, {0x2, 0x7}}, {0x0, 0x7fff, {0x0, 0x4}}, {0x8001, 0xcb49, {0x2, 0x5}}, {0x5, 0x1, {0x0, 0x1000}}, {0xfffc, 0x9, {0x1, 0x1}}, {0x200, 0x58, {0x2, 0x9}}, {0x81, 0x80b5, {0x0, 0x4}}, {0x4, 0x3, {0x3, 0x97}}, {0x48e, 0x0, {0x1, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x0, 0xff, 0x1, 0x8000, 0x1, 'syz1\x00', "887f6872b8f65d2cb8ae24da098c46b53e142d6c234c4d613cce743105c62235", "c96b3a06a883945d31ac703f0d53de6aa21d46538847b07a6e96d951dd970a37", [{0x5, 0xffff, {0x0, 0xeed1}}, {0x2, 0x1f, {0x3, 0x7}}, {0x1, 0xd6e, {0x2, 0x80000001}}, {0x1, 0x3, {0x0, 0x6}}, {0x3, 0x800, {0x2, 0x9}}, {0x8, 0x1, {0x2, 0x800}}, {0x81, 0xff7f, {0x2, 0x6}}, {0x200, 0x40, {0x3, 0x8001}}, {0x5, 0x2, {0x1, 0x81}}, {0x6, 0x2526, {0x0, 0x6}}, {0x8, 0x1, {0x0, 0xfff}}, {0x800, 0x7f, {0x2, 0x47}}, {0x8, 0x101, {0x0, 0x3b1e}}, {0x400, 0x7, {0x3, 0x9fb}}, {0x1, 0x0, {0x2, 0x401}}, {0x3, 0x8, {0x6dd5b8ee72078cb8, 0x1}}, {0x9, 0x7, {0x0, 0x9}}, {0x2, 0x200, {0x2, 0x80000001}}, {0xfff, 0x800, {0x0, 0x800}}, {0x7, 0x4e, {0x2, 0x5}}, {0x5, 0x2, {0x0, 0x7fffffff}}, {0x9, 0xee, {0x1, 0x8001}}, {0xe9f6, 0x5, {0x0, 0x1}}, {0x3, 0x4d, {0x1, 0x1}}, {0xf0, 0x100, {0x1, 0x400}}, {0x3, 0x6, {0x1}}, {0xd2, 0x8, {0x2}}, {0x7, 0x3ff, {0x1, 0xb539}}, {0x9, 0x5, {0x0, 0x3ff}}, {0x7, 0x800, {0x0, 0x7}}, {0x2, 0x7, {0x0, 0x8}}, {0xff, 0x7, {0x3, 0x9}}, {0x9, 0x1, {0x2, 0x1ab3}}, {0x8, 0x5, {0x1, 0xfffffe3d}}, {0x7ff, 0x6, {0x3, 0xb6e}}, {0x0, 0xe5, {0x1, 0x80000000}}, {0x8b, 0x5a7, {0x1, 0x5}}, {0x0, 0xfff, {0x3, 0x6}}, {0x3, 0x8, {0x1, 0x57}}, {0x4, 0xe8, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x9, 0x3, 0x0, 0x6, 0x1b, 'syz1\x00', "fb2920fe6d7193bbeba0868683e69f1bd0bbfe4ad29bd58776af7cdffe79227c", "05f80b3f0408f73f3f2995fd009d9961920269396ad3153d2716a624900041ff", [{0x100, 0x4, {0x0, 0x3}}, {0x5, 0x0, {0x3, 0x9}}, {0x0, 0x6, {0x2, 0x7fffffff}}, {0x0, 0x8, {0x0, 0x2}}, {0x8, 0x1, {0x1}}, {0x2fc1, 0x6, {0x3, 0x6}}, {0x7, 0x4, {0x1, 0x6}}, {0xe8, 0x0, {0x2, 0x20}}, {0x9, 0x401, {0x0, 0x9}}, {0x6, 0x7ff, {0x4eee96901e2e78ae, 0xa5}}, {0x3, 0x4, {0x1, 0x3}}, {0x6, 0xcd2, {0x2, 0xfff}}, {0x2, 0xfff, {0x3, 0xfffffb68}}, {0x0, 0x20}, {0x6, 0x5, {0x1, 0x4}}, {0x9, 0x9, {0x3, 0x4}}, {0xe469, 0xa7, {0x3, 0x6}}, {0x7, 0x10, {0x1}}, {0x399d, 0xfffa, {0x1, 0xffff}}, {0x7fff, 0x5, {0x3, 0x9352}}, {0x7, 0x3, {0x3, 0xfff}}, {0x20, 0xdcb, {0x0, 0xcc}}, {0x1f, 0x91, {0x1, 0x8}}, {0xffff, 0x1, {0x1, 0xffffff9b}}, {0x5, 0xd4, {0x1, 0xa31}}, {0x9c, 0x1, {0x0, 0x80000001}}, {0xed, 0x1, {0x3, 0x5}}, {0xfaa1, 0x7, {0x1, 0x7}}, {0x6, 0x6, {0x0, 0x1}}, {0x3, 0x3, {0x0, 0x7}}, {0x2, 0x59, {0x2, 0x8}}, {0x5, 0x1, {0x0, 0x81}}, {0x7fff, 0x800, {0x3, 0x2}}, {0x400, 0x6, {0x2, 0x1f}}, {0x7fff, 0x6, {0x3, 0x3}}, {0x8, 0x6, {0x3, 0x7f}}, {0x9, 0x0, {0x1, 0x9}}, {0x3f, 0x7, {0x2, 0x8}}, {0x0, 0x4, {0x1, 0xe9}}, {0x9, 0x87, {0x1, 0xff}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0xff, 0xfc, 0x8, 0x9, 0x2, 'syz0\x00', "9270ffa975f4796c9235cd26d533cd69a5fafdedb4f9b015598ca42878b6d5d9", "5be2ee862f727a7df7230d632679d85ca36b683df2931f5b71282213dd2c8ac0", [{0x100, 0x7, {0x1}}, {0x5, 0x4, {0x2, 0x8}}, {0x35c4, 0x3, {0x1, 0x7ff}}, {0x7fff, 0x2, {0x2, 0xfffffff9}}, {0x8001, 0x0, {0x2}}, {0x9, 0x3, {0x3, 0x45}}, {0x400, 0x5, {0x0, 0x9}}, {0x5, 0x9, {0x2, 0xf69}}, {0x7, 0x5, {0x3, 0x1}}, {0x2, 0x3ff, {0x3, 0x3}}, {0x6, 0x7, {0x3, 0x1}}, {0x1, 0x1, {0x2, 0xf9}}, {0x8, 0x5, {0x3, 0x1}}, {0xffff, 0x1, {0x1, 0xae79}}, {0x28, 0xff, {0x2, 0x9}}, {0x2, 0x800, {0x1, 0x8}}, {0x7, 0x1, {0x2, 0xea2}}, {0x7, 0xffff, {0x3, 0xffffffff}}, {0x2, 0x1000, {0x2, 0x818}}, {0x20, 0x7, {0x0, 0x3}}, {0x7, 0x40, {0x0, 0x3}}, {0x6, 0x6, {0x3, 0x8}}, {0x0, 0x6a3, {0x0, 0x9}}, {0x5, 0xa19c, {0x1, 0x9}}, {0x3b93, 0x8, {0x2, 0xd0a}}, {0x4, 0x400, {0x0, 0x3}}, {0x2, 0x4, {0x0, 0x1f}}, {0x8001, 0x6e40, {0x1, 0x6}}, {0x7, 0x37a0, {0x3, 0x10000}}, {0x5, 0x3, {0x2, 0x4}}, {0x8000, 0x790, {0x0, 0x20}}, {0x6, 0xfff, {0x0, 0xffffffff}}, {0x4, 0x80, {0x1, 0x4}}, {0x8, 0x3f, {0x1, 0x2}}, {0x272, 0x5, {0x3, 0x1000}}, {0x1ff, 0x6, {0x1, 0x3}}, {0x7, 0x3, {0x0, 0x5b}}, {0x7, 0x40, {0x0, 0xa8bc}}, {0x4, 0x2, {0x1, 0x7fff}}, {0x4f6, 0xf801, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x8, 0xf9, 0x8, 0x0, 0x12, 'syz1\x00', "7110845bb1a0a6256b119b807ce2ae7077f3dd3a8a0e9775d6eb3ff4d0d9dcff", "c10cc0ff961730d1ac34159d6151aa323fc65dbe5aa96dd4153946ce67bb4750", [{0xffff, 0x200, {0x3, 0xdf}}, {0x2, 0x1, {0x0, 0x5}}, {0x9c8, 0x20, {0x0, 0x80000001}}, {0x5, 0xffff, {0x1, 0x20}}, {0x9, 0x9, {0x0, 0x7ff}}, {0x6, 0x8000, {0x3, 0x2}}, {0x0, 0x6, {0x1, 0x17a4f45f}}, {0x4, 0x8001, {0x2, 0x8}}, {0xffff, 0x3b, {0x0, 0x7}}, {0x20, 0x1f, {0x3, 0x4}}, {0x1, 0x3f, {0x0, 0x8000000}}, {0x2, 0x9, {0x0, 0x2}}, {0x7fff, 0x3, {0x0, 0x7ff}}, {0x6, 0x1, {0x1, 0x1}}, {0x4, 0xb22, {0x2, 0x7f}}, {0x6, 0x0, {0x0, 0x81}}, {0x6, 0x401, {0x3, 0x1ff}}, {0x2, 0x400, {0x3, 0x9}}, {0x7, 0x9, {0x2, 0x81}}, {0x6, 0x7, {0x2, 0x5}}, {0x80, 0x200, {0x1, 0xfffffffe}}, {0x5c4, 0x58, {0x0, 0x1ad}}, {0xf2, 0x200, {0x2, 0x3}}, {0x3, 0x3, {0x3, 0x9}}, {0x8, 0x3, {0x2, 0x800000}}, {0x6, 0x7, {0x3, 0x7f}}, {0x0, 0x3, {0x1, 0x9247}}, {0x9, 0x8, {0x3, 0x3ff}}, {0x8, 0x8000, {0x3, 0xdbb}}, {0x7, 0x8000, {0x1, 0x3f}}, {0x8, 0x6b, {0x1, 0x7}}, {0x20, 0x0, {0x2, 0x1e}}, {0x81, 0x41, {0x3}}, {0x7ff, 0x6, {0x3, 0x2}}, {0x29, 0x6aa, {0x2, 0x6}}, {0x3, 0x5a7b, {0x2, 0x8}}, {0x3f, 0x7, {0x3, 0x1}}, {0x7, 0x2, {0x1, 0x4}}, {0x3, 0x5, {0x3, 0x1000}}, {0x5, 0x7, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x56}, 0x5, 0x1f, 0x1, 0x4, 0x11, 'syz1\x00', "6368904dc65b248cc7374144de0f5c4549a9eff97706d3be6e5f101fa4ccd997", "2ec885dc59b1b0de67054c04a9286e639a44093b11b667bd59a6e3dff6375ef0", [{0x40, 0xda, {0x1, 0x6eaf}}, {0x1, 0xfffc, {0x3, 0x2}}, {0x3, 0xfff, {0x0, 0x8}}, {0x7, 0xff, {0x2, 0x8}}, {0x6d, 0x20}, {0x400, 0x212e, {0x2, 0x10001}}, {0x0, 0xffff, {0x3, 0x5}}, {0x81, 0x3, {0x2, 0x6}}, {0x0, 0x7ff, {0x0, 0x3ff}}, {0x3, 0x4000, {0x2}}, {0x6, 0x3, {0x0, 0x1290a1fa}}, {0x3000, 0xea9, {0x0, 0x20}}, {0x100, 0x8001, {0x0, 0x6}}, {0x81, 0x9, {0x1, 0xfffffff8}}, {0x9, 0x436, {0x3, 0x2}}, {0xfffa, 0x3, {0x1, 0xffff0001}}, {0x5, 0x7, {0x3, 0x6f}}, {0x3, 0x200}, {0xa9, 0x5, {0x2, 0x7}}, {0x4, 0x5, {0x2, 0x80000000}}, {0x7f, 0x86e, {0x3, 0x24c}}, {0x0, 0x4, {0x2, 0x3}}, {0x8000, 0x2, {0x0, 0x6}}, {0x1e, 0x27bc, {0x1, 0x3}}, {0xfa09, 0x1000, {0x0, 0x1}}, {0x0, 0x8001, {0x3, 0x1f}}, {0x6, 0x7f, {0x2, 0x3}}, {0xf8, 0x3, {0x2, 0xfffff001}}, {0x100, 0x7ff, {0x2, 0x7f}}, {0xff, 0x9, {0x1, 0x2}}, {0x6, 0x3ff, {0x2, 0x4}}, {0x1ff, 0x7, {0x3, 0xffff}}, {0x39, 0x7, {0x3, 0x3614c6b8}}, {0x100, 0x100, {0x3, 0x533}}, {0x24d7, 0x6, {0x2, 0x9}}, {0x1, 0x8, {0x1, 0x58c}}, {0x0, 0x8000, {0x0, 0x7}}, {0x80, 0x3, {0x2, 0x9}}, {0x2, 0xc0e, {0x0, 0x3ff}}, {0x4, 0x81, {0x2, 0x3ff}}]}}}, {{0x254, 0x1, {{0x0, 0x5b}, 0xcf, 0x0, 0xffa4, 0x0, 0xa, 'syz0\x00', "f77d9b5312fc09e6c3b48de253c2b43855f61ca62669259a9430318e38d0d252", "9a048428317fdc175549844a885b735c93ae174229ca99a570ba6e7899e98392", [{0x3, 0x8, {0x0, 0x85}}, {0x5, 0xbf, {0x0, 0x6}}, {0x80, 0x8001, {0x0, 0x9}}, {0x2, 0x1f, {0x2, 0x3}}, {0x0, 0x5be4, {0x2}}, {0x14f7, 0x4, {0x0, 0x56}}, {0x40, 0x20, {0x3, 0x101}}, {0x4, 0xff01, {0x2, 0x395dfd90}}, {0x2, 0x3, {0x1}}, {0x5, 0x6, {0x3, 0x9}}, {0x800, 0x6, {0x1, 0x5}}, {0x11, 0xff, {0x1}}, {0xfbff, 0x200, {0x1, 0x8}}, {0x7f, 0x8352, {0x2, 0x5}}, {0x20, 0x0, {0x3, 0xff}}, {0x6, 0x5, {0x1, 0x3}}, {0x101, 0x5, {0x2, 0x1}}, {0x8, 0x7, {0x1, 0x80}}, {0x0, 0x7, {0x1, 0x1}}, {0x101, 0xffcb, {0x0, 0xfa6}}, {0x7867, 0xe72, {0x2, 0x83b}}, {0x5, 0x7, {0x2, 0x42811b27}}, {0x4, 0x4, {0x0, 0x1}}, {0x593a, 0x9c22, {0x1, 0x11f25ed9}}, {0x986f, 0x8001, {0x1}}, {0x6, 0x0, {0x3, 0x9}}, {0x24, 0x0, {0x0, 0x1000}}, {0x3, 0x8455, {0x2, 0x4}}, {0x40, 0x800, {0x0, 0x4}}, {0x4, 0x10, {0x2, 0x7376}}, {0x44, 0xe13, {0x3, 0x1}}, {0x1, 0x5, {0x0, 0x100}}, {0x8001, 0x7, {0x3, 0x7}}, {0x9, 0x1f, {0x3, 0x4}}, {0xfff, 0x0, {0x2, 0x80}}, {0x0, 0x9, {0x1, 0x1}}, {0x1, 0x1, {0x1, 0x4}}, {0x8000, 0x2, {0x3, 0x1}}, {0xfff8, 0xac, {0x1, 0x1000}}, {0x1ff, 0x7, {0x1, 0x9f2}}]}}}, {{0x254, 0x1, {{0x2, 0x20c7}, 0x7e, 0x2, 0xfff, 0x9, 0x1a, 'syz1\x00', "881329bb37592c460d7bef9e801928b6608344667feb343fc8fcb02dc618dfa5", "6727f4c45b48eee361d4976b062df40e9d391ae2cf10c4810450bb350ed50b37", [{0x2, 0x8, {0x3, 0x20}}, {0x124, 0x7ae, {0x3, 0x100}}, {0x8000, 0x6, {0x2, 0x7f}}, {0x582d, 0x0, {0x2, 0x1}}, {0xef, 0x20, {0x0, 0x6}}, {0x0, 0x9, {0x1, 0xfc9b}}, {0xfffe, 0x2, {0x0, 0x80000000}}, {0x100, 0x8, {0x2}}, {0x3, 0xff, {0x2, 0xdf}}, {0xfff, 0xd0, {0x1, 0x80}}, {0xfff8, 0x1000, {0x3, 0x8}}, {0x4, 0x1f, {0x3}}, {0x3, 0xfa, {0x0, 0x9}}, {0x1000, 0x5, {0x2}}, {0x8, 0x1, {0x3, 0x3}}, {0xbf, 0x1, {0x1, 0xffffffc9}}, {0x0, 0x1, {0x0, 0xa5c9}}, {0x7, 0x4, {0x1}}, {0x1e59, 0x401, {0x0, 0x7}}, {0x20, 0x6, {0x0, 0x2be}}, {0x92, 0x0, {0x1, 0x6}}, {0x8, 0x7a, {0x0, 0xe62}}, {0xe7, 0x0, {0x1, 0x10000}}, {0x0, 0x1, {0x3, 0x1d}}, {0x5, 0x40, {0x1, 0x8c05}}, {0x1, 0xf5, {0x1, 0x9}}, {0x4, 0x3f, {0x0, 0x3}}, {0x5, 0x81, {0x2, 0x3a}}, {0x1ff, 0x9, {0x0, 0x3ff}}, {0x7, 0xf2, {0x2, 0x76f}}, {0x9, 0x5, {0x3, 0x3}}, {0x20, 0x7, {0x1, 0x6}}, {0xf1c, 0x6, {0x0, 0x5}}, {0x5, 0x2, {0x1, 0x800}}, {0x7ff, 0x8, {0x3, 0x4}}, {0x7fff, 0x1, {0x1, 0x1f}}, {0xce62, 0x4, {0x1, 0x9}}, {0x23, 0x80, {0x0, 0x5d2}}, {0x1, 0xffff, {0x0, 0x7fffffff}}, {0x104, 0x5d4, {0x1, 0x2000000}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x4, 0xfff, 0x100, 0x1c, 'syz1\x00', "e90dea7ff46fe3148c32cd9c3700a2b0d470d614a9ed69d8d49eb09786ba0105", "88ffccb062e5d89189844d6c0b24d479ff3911a4c056ccc3af8aca1a998ef0c2", [{0xfff9, 0x1f, {0x3, 0x7fff}}, {0x7f, 0x9, {0x3, 0x3}}, {0x5, 0x400, {0x2, 0x1ff}}, {0x3, 0x9, {0x3, 0xfff}}, {0x200, 0x40, {0x2}}, {0x1, 0xffff, {0x0, 0x1}}, {0x7ff, 0x7, {0x1, 0x100}}, {0x0, 0x0, {0x2, 0x9}}, {0x1, 0x7, {0x0, 0xd38}}, {0xf001, 0x4, {0x1, 0x6}}, {0x7, 0x6, {0x2, 0x7}}, {0x3, 0x6, {0x0, 0x1000}}, {0xb30a, 0x8, {0x1, 0x7bdd03ae}}, {0x4, 0x7, {0x2, 0xc911}}, {0x1, 0x200, {0x3, 0xffffffff}}, {0x1ff, 0x2, {0x3, 0x81}}, {0x2ee2, 0x800, {0x2, 0x6}}, {0x2, 0x100, {0x1, 0x4}}, {0x5, 0x3, {0x3, 0x1}}, {0x3d73, 0x0, {0x3, 0x401}}, {0x5, 0xfeff, {0x3, 0x5}}, {0xff, 0xff, {0x0, 0x5}}, {0x80, 0xbbb7, {0x3, 0x6}}, {0x0, 0x1f, {0x1, 0x7fffffff}}, {0xffff, 0xf6, {0x1, 0x5}}, {0x1, 0x101, {0x3, 0x3}}, {0x6, 0x7f, {0x3, 0x80000000}}, {0x7, 0x200, {0x3, 0x7ff}}, {0x6, 0x3, {0x1, 0xff}}, {0x7, 0x200, {0x3, 0x72}}, {0xffff, 0x1, {0x0, 0x2}}, {0x3, 0x3f, {0x2, 0x8}}, {0x9, 0x2, {0x3, 0x800}}, {0x8, 0x7ff, {0x1}}, {0xff00, 0x0, {0x1, 0x101}}, {0x8, 0x53d3, {0x0, 0xad6e}}, {0xdfb5, 0x1f, {0x3, 0x6}}, {0x1, 0x0, {0x1, 0x5}}, {0x100, 0x81, {0x3, 0x7}}, {0x6, 0x1000, {0x2, 0x100}}]}}}, {{0x254, 0x1, {{0x1, 0xe9}, 0x4, 0x4, 0x7fff, 0x5, 0x0, 'syz1\x00', "4cb3e993cb1c2f7f5ddd05ae2feb9da0b906410a0029e3a89fb3594514cc50fe", "fc8883bd4e5fdefe1d8ec891c66a0149af23d07b3fbc0c5881ed3096bfafb733", [{0x7, 0x6, {0x0, 0x4}}, {0x800, 0x8, {0x2, 0x7}}, {0x150d, 0x9, {0x2, 0x9}}, {0x8000, 0x8001, {0x3, 0x7fffffff}}, {0x4, 0xfeff, {0x0, 0x14}}, {0x8, 0x7ff, {0x2, 0x7fffffff}}, {0x0, 0xf9}, {0x7, 0x1ff, {0x3, 0x3}}, {0x3, 0x11, {0x3, 0x1}}, {0x0, 0x9, {0x3, 0x9}}, {0xfff7, 0x5, {0x0, 0x1}}, {0x101, 0x9, {0x0, 0x9}}, {0xff, 0x9, {0x2, 0x200}}, {0x6, 0xfff, {0x3, 0x4}}, {0x1ff, 0x200, {0x0, 0x8}}, {0x40, 0xfeff, {0x2, 0x1f}}, {0x8001, 0x5, {0x1, 0x5}}, {0x20, 0x2, {0x3, 0x1000}}, {0x80, 0x1f3, {0x1, 0x1ff}}, {0x4, 0x4, {0x1, 0x3}}, {0xa3a6, 0x800, {0x1, 0x1ff}}, {0x95a, 0x1, {0x2, 0x3}}, {0x1799, 0x2, {0x0, 0x1}}, {0x1ff, 0x0, {0x0, 0x8}}, {0x7f, 0x401, {0x0, 0x1ff}}, {0x82, 0x2, {0x3}}, {0xf55b, 0xb46, {0x1, 0x7}}, {0x80, 0x7, {0x1, 0x6}}, {0x7, 0x0, {0x3, 0x9fec}}, {0x4, 0x8000, {0x1, 0x3}}, {0x3f, 0xc065, {0x0, 0x5}}, {0x0, 0x8, {0x0, 0xa0d9}}, {0x100, 0x5, {0x2, 0x2}}, {0x3ce7, 0xf3b8, {0x0, 0x10001}}, {0x5, 0x2, {0x2, 0xfffffffd}}, {0xdb6c, 0x9, {0x3, 0x8}}, {0x7f, 0x200, {0x1, 0x10001}}, {0xfffd, 0x1, {0x2, 0x3}}, {0x3, 0x0, {0x3, 0x29c8}}, {0x7, 0xfff9, {0x2, 0x1}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x81}, 0x20008090) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0x218, 0x218, 0x2b0, 0x0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x398, 0x4, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'gretap0\x00', 'dummy0\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x1, 0x0, 0x8, 0x0, 0x80000000, 0x7fff}}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth0_to_bond\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 779.511499] audit: type=1800 audit(2000000410.780:129): pid=30822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=163845 res=0 03:40:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400205) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20100, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(0xffffffffffffffff) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800c58249d8e43d8d08004007a22f40a3000500", @ANYRES32=r6, @ANYBLOB="5b17bf916641db1fba10b578b92c4a00000000ff68667363000000000800020000000000"], 0x38}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 779.592202] ip_tables: iptables: counters copy to user failed while replacing table [ 779.600909] overlayfs: invalid redirect (./file0) [ 779.639490] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x100, 0x7, 0x4, 0x4, 0x4, {}, {0x5, 0xc, 0x8, 0xae, 0x2e, 0x4, "69cc488c"}, 0x7, 0x3, @planes=&(0x7f0000000000)={0x0, 0x10000, @userptr=0xffffffffffffff92, 0x401}, 0x6094, 0x0, 0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000140)=0x4) r3 = open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) sendto(r3, &(0x7f0000000380)="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", 0x1000, 0x2008800, 0x0, 0x0) execve(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000001380)=[&(0x7f0000000200)='overlay\x00', &(0x7f00000002c0)='overlay\x00'], &(0x7f00000014c0)=[&(0x7f00000013c0)='trusted.overlay.redirect\x00', &(0x7f0000001400)='overlay\x00', &(0x7f0000001440)='trusted.overlay.redirect\x00', &(0x7f0000001480)='trusted.overlay.redirect\x00']) 03:40:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000182002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000ffb59ebf6e00"], 0x5}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x200000, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030385aacb976643d000000001d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 782.408518] overlayfs: invalid redirect (./file0) 03:40:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$fb(r2, &(0x7f0000000040)="31cad7b7ad6a2d392cfa3b69b6f60269ce2c1535ac6b86694dc9c2b6892b7de079fec6827c2bbcc911258ad33096862af51b2a7973aa51386d9c3f88dc32c56ec8e83670bf9e", 0x46) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="81f62e895c89f80ef429a858fe7174ebccf7d2d6be114823de6a07d824b1a374f7e25d55870965fa8c0ee6c5d8bef64fde5d924f392625228495c466a4b57f6faf6a50ee19c7d0ea1381ae128dd51c1e7e66ee619629"]) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x180, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 782.444093] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r7, 0xfff8, 0xa7, "eaca3585d6e4ff7eb2c7fa2d465bc9000000a0f7042d200b4dba665f3be8ba823453d88e9a16ae54aad5c7158eaf116b65a1168afa717718de6480fddf9d9aa85de7573394b6494f81812c7466953afc5c94921175b5f2e42a5af13986d64e7806b9e0bf48f4db2b50e9635c92ba5987e05e3e759665b862a967c1ec3992f9f603f3f26b0574163fafd1d723d6fbca25f3cc62226752f5caf957af8c1f22b0351ceff31d50c4d9"}, 0xaf) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e23, 0x2, @local, 0x1f}}}, 0x84) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002080)={0x1a0, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:13 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) accept(r0, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 782.734509] overlayfs: invalid redirect (./file0) [ 782.775544] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xffffffffffffff9d, 0x6, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xa0080, 0x0) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000180)=""/250) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000280)={0x935e, 0x10000, 0x610965c, 0x0, 0x17, "f45d4e36c9a8b81ffc20ab6a5a7aab209f787a"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r6, 0x800443d3, &(0x7f0000000040)={@any, 0x6, 0xe53, 0x5}) 03:40:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000003a00)='./file1\x00', &(0x7f0000003a40)='trusted.overlay.nlink\x00', &(0x7f0000003a80)={'L-', 0xfffffffffffff543}, 0x16, 0x3) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x800) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000003940)=ANY=[@ANYPTR=&(0x7f0000003900)=ANY=[@ANYRESDEC]]) mount$overlay(0x0, &(0x7f00000035c0)='./file0/file0\x00', &(0x7f00000037c0)='overlay\x00', 0x400, &(0x7f0000003800)={[{@metacopy_on='metacopy=on'}, {@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}, {@nfs_export_on='nfs_export=on'}, {@xino_auto='xino=auto'}, {@metacopy_on='metacopy=on'}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/proc/sys/net/ipv4/vs/amemthresh\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/sys/net/ipv4/vs/amemthresh\x00'}}, {@obj_type={'obj_type', 0x3d, '-O/selinuxbdev&%'}}]}) recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f0000000080)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @default, @default, @remote, @netrom]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1, &(0x7f0000000200)}, 0xa368}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/189, 0xbd}], 0x3, &(0x7f00000004c0)=""/205, 0xcd}, 0x2}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/209, 0xd1}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000000840)=""/88, 0x58}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f0000000a00)=""/207, 0xcf}], 0x5}, 0x8}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000c00)}, 0x9}, {{&(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000cc0)=""/202, 0xca}, {&(0x7f0000000dc0)=""/66, 0x42}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002e80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f00)=""/82, 0x52}, {&(0x7f0000002f80)=""/182, 0xb6}, {&(0x7f0000003040)=""/121, 0x79}], 0x3, &(0x7f0000003100)=""/49, 0x31}, 0x80}, {{&(0x7f0000003140)=@nfc_llcp, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/211, 0xd3}], 0x1, &(0x7f0000003300)=""/77, 0x4d}, 0x3}], 0x8, 0x40002160, &(0x7f0000003580)={0x77359400}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getrlimit(0xf, &(0x7f0000003ac0)) statx(r4, &(0x7f0000000c00)='./file0\x00', 0x800, 0x8, &(0x7f0000003640)) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000039c0)={0x8, 0x7, 0x200}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000003740)=""/72, &(0x7f0000003600)=0x48) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000003980)={0x7, [0x3, 0x2, 0x1, 0x1, 0x6, 0x1f, 0x81e8]}, 0x12) 03:40:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e66733d6e6f7374616c655f726f2c009b190f2db104ecab4f5576ec9199a09a2e3290d1e359420f2a5a7c0197f2c63cc0d7055d54de0fc5f133e91af92c28d3eb6f"]) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x40) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x13a, 0x29, 0x2, {0x6, [{{0x2, 0x4, 0x1}, 0x3cc7, 0x40, 0x7, './file1'}, {{0x0, 0x3, 0x9}, 0x0, 0x1, 0x7, './file1'}, {{0x20, 0x3, 0x6}, 0x3, 0x1f}, {{0x20, 0x1, 0x6}, 0x1, 0x2, 0x7, './file1'}, {{0x8, 0x0, 0x200000}, 0x7f, 0x0, 0x7, './file1'}, {{0x2, 0x3, 0x7}, 0xaf, 0x6, 0x7, './file1'}, {{0xdb, 0x4, 0x7}, 0x4, 0x5, 0x7, './file1'}, {{0x0, 0x2, 0x6}, 0x0, 0x9, 0x7, './file1'}, {{0x80, 0x2, 0xb}, 0x2, 0xff, 0x7, './file1'}, {{0x0, 0x5, 0x1}, 0x3f, 0x83, 0x7, './file0'}]}}, 0x13a) 03:40:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x7, 0x2, 0x4, 0x2, 0x10001, {}, {0x2, 0x1, 0xa9, 0xaf, 0xf7, 0x9, "5469b7de"}, 0xeed, 0x9c16e8e069f2b59, @planes=&(0x7f0000000040)={0x5, 0x9, @mem_offset=0x4, 0xef1}, 0xa2ce, 0x0, r0}) r2 = perf_event_open(0x0, 0x0, 0x3, r1, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 785.449313] overlayfs: missing 'lowerdir' 03:40:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x6, &(0x7f0000001480)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}, {&(0x7f0000000140)="0848fbaf9d844140772be9d2c720bd11d2970de016a64dd4bd1610534b71035a2a24dc8128a717914aede1222c34c98f521ffe27699ee8642f4e4d45ffd55e", 0x3f, 0x7fff}, {&(0x7f0000000340)="48ae369a2cab1bbf8c5d66c156604c1d81739d6a3488227bfd7bf6653cf2d43899ead3afbbeeac55cbee06c648a596d4fe00ec41a24a5b72d4108f2bbf2c7991e6f28b79deea91c57468c25aeaa2e0b111a9", 0x52, 0x7}, {&(0x7f0000000200)="3008ba5589254f040bd14e0bfb188d2994a62cb9e0f45bb8a68e582580ba22fe95185b3d6644d04bcd193706db9f8888a87fc2d4b39f5a73a2adb6da25466d2be2becb0f5e2243e4f9c455265218b92f4375574fe3395659f66e2e560525dee92e560d3c483a822a949562ae63f715f239fc158d17b58302ee6151f7ff7238e9280bbbaa3ecd0c9a6ca076d988d1809e41d3485053b315cabf3497fe738a12560c35ef167595b72e4691ccf421a06abef6c2c40b7f4d6b304728984579ffb7098b", 0xc1, 0x3b8}, {&(0x7f00000003c0)="0dd0f3c664eb2e5ac8f5b1311ea0e83825a16d222efc8da0008cd00f484c6ff7188d3f46355d746bc246806771cf108169b6b1047abd56cb0f291805a20f40cc5c72412be38a6625d36e6e767924a0186fdd74b882da5f48c7236e0e798022d6dcca72cb6929403fe5c9f9de27b528ed4a334163de94b1e0c20b22ff10ba573c5b8fc6aae8d6a51ec0f4a87dbbf064d9bba1c88b732086b6f07824dbf733", 0x9e, 0x7}, {&(0x7f0000000480)="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", 0x1000, 0x5}], 0x0, &(0x7f0000000300)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='overlay\x00', 0x4, &(0x7f0000001540)={[{@redirect_dir={'redirect_dir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@index_on='index=on'}, {@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file1'}}, {@metacopy_off='metacopy=off'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_off='metacopy=off'}], [{@fsname={'fsname', 0x3d, '{*&keyringem1'}}, {@context={'context', 0x3d, 'root'}}]}) [ 785.485918] overlayfs: missing 'lowerdir' 03:40:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2006) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=""/62, 0x3e) 03:40:16 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="c4e16b5ee4b9f50900000f32f20f5a6f0066baf80cb8bedcb488ef66bafc0c66ed0f2266b8b1f3d64b0f23d00f21f835300000050f23f866baf80cb8cd93bc8eef66bafc0cec660f3880530f0f089a008000001201", 0x55}], 0x1, 0x20, &(0x7f0000000200)=[@cr0], 0x1) close(r0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 785.620355] overlayfs: invalid redirect (./file0) 03:40:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 785.666842] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 785.686823] overlayfs: invalid redirect (./file0) [ 788.310241] NOHZ: local_softirq_pending 08 03:40:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [], r1}, 0x18, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@dots='dots'}, {@fat=@nfs='nfs'}, {@fat=@debug='debug'}], [{@fowner_gt={'fowner>', r1}}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d400", @ANYRES16=r2, @ANYBLOB="00080000000000000000250000000e0001006e657424657673696d0000000f0002921a3fd37972c3bf696d30000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000008a00", @ANYBLOB="0800010070636900110002003030303009550124333116068254c0a1d7181a3ef678aec322b9f03a30303a31302e300039000008008a3df57b85efd342e0b1b8d303ec20db819e68d8f7b667b2ae00709287723a99feee0215a6a19c77539551711cf636e01e115b1bd6", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f", @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xa8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44000}, 0x84) 03:40:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)) fcntl$dupfd(r3, 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9882, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES64=r8, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYRESHEX, @ANYRES64=r3, @ANYRES16=r1], @ANYRES16=r2, @ANYRESDEC]]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) 03:40:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c0400000000f5ffff6b655f722f2c00"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x400001a) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f00000001c0)=""/185, &(0x7f0000000280)=0xb9) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000100)={@none, 0x2, 0x7fff, 0x81, 0x0, 0x8001, "f1afcca1f06a6e75289487ab130e0780b8115c9834cc6748412785b7fa7f5a7811c4ee1348a87faa39608c477e9554d348a43ac2ff2eb3961f1efa16899ff0058f39b884a07fbf5c10a3a75fe53c50ef768ce7a80c8133ee5c60d24de82be6b7a78dba34f88ce9e8f07942b8717fffcf212fa4cc124e415b8a858b80d5c1cee6"}) 03:40:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000001c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="ec3c04000000732e3c66ddda6ba257ebf29d15", 0x13}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) 03:40:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000040)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3c6c6ffa1b486994adc007426d2d42ac5c7765726469723d3e3a66696c7530"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000080)={@empty, @random="9b4deb1ad152", @void, {@llc_tr={0x11, {@snap={0xab, 0x1, '9t', "de3680", 0x88ca, "328b5cf38b12a1008efe5eb1437dba6fb6587d7b6ce1644e51636109ca6c3bce3b50a6c79328e48a76508e8c37bab44317d5dc29"}}}}}, 0x0) 03:40:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:22 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:22 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYBLOB="000000000040000028000900010212147631f488dd2159e600", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000076fa9559971a38630c00240007050000002a16a775b5d346e0a119504c0bd11ba0e1e0792f", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "ae8ef7f307d3608e"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r10, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x324c08d, &(0x7f0000000580)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x10000}}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@allow_other='allow_other'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt={'fowner>'}}, {@obj_user={'obj_user', 0x3d, 'default_permissions'}}]}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000040)=0x2000) [ 791.546870] overlayfs: unrecognized mount option ":filu0" or missing value [ 791.551707] selinux_nlmsg_perm: 854 callbacks suppressed [ 791.551716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30977 comm=syz-executor.3 [ 791.571020] overlayfs: unrecognized mount option ":filu0" or missing value 03:40:22 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x8200, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000180)={0x81, 0x14, [0x0, 0x5, 0x9, 0xffffff31, 0x5]}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3e0d6436122636dfa1f64abe984825ac365c24e355abd24b8e81d92150195f06b1ad173afd11401ef7712ab060592b9163699855f79687ad901d450031d12c80f1d5e8bcb8e924bb496e823516beacded6e3885812a853564c81ff5823ccf85585ab10cbba5948edb1a5c21ea14fc101d7e4e7067a6e8e3cb9eed20d672dbe000000007fc3c605365cc7"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 791.611707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38394 sclass=netlink_route_socket pig=30991 comm=syz-executor.3 [ 791.715291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30991 comm=syz-executor.3 [ 791.730366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38394 sclass=netlink_route_socket pig=30977 comm=syz-executor.3 03:40:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x4000000000107fd, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000005d80)=ANY=[@ANYBLOB="6f6f74772c001c9a461edb622d302b70d791a6fb066a5f02c23a5b7c6596e83eac3805ac6dab4732e7b787aea2eed303bf205d7c447ab370a1cd15c7e30ee1e0484d68229d51b8a1a14de38708841d6debdd3792d3e2cfc63d624755f91019a0c6176e65b9c690fb542a850476a52c05f6c5514a7cd5cb293f0239baab9890504e0ca7b5989844b5754f03e807136616ba59ae5ff86669cb7c17ed418d72982a7769e61ab732eaf3ea49b604a8185043a3afc19808d9961b541f0f000000000000000000"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005a40)={0x0, 0x0, 0x0}, &(0x7f0000005a80)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000005640)='./file1\x00', 0x8290, 0x4, &(0x7f00000059c0)=[{&(0x7f0000005680)="7e713c5ea8ecd6ce13820e71ed5c2492ae0eca8141032e15fa010cb6bcce0bcddeb490764d0200444f0494a36a458fda21b587ad283f9928f5fe72b8b96f9a45f38ba96fa7015238903b8c48b8ca683972bb6c4864f937fe3047a32b91e308989a9655f9903094684a6ea473b979cc89cb1bfd5e354136d8eecfc3a9fa36b7e9f3d6e9ac561d71deecac3203c3e2801274b403287685e143696b3f17e79701ba98174eedbecdf5", 0xa7, 0x2}, {&(0x7f0000005740)="6c6749d99fb1853a6d51c1979ff52e5c5f5830539ac1d85bde61bc63da3cf3626d8105ce12981a707d9d980a8cd58692b8aa250b8216cc0ab77c82fa4a20c90ad3d54be2bfbaeb4c270a27e2c8f32ee4b649db7f1f", 0x55, 0xaa}, {&(0x7f00000057c0)="c592e0f7e84887d7a8caef1dd4df2809ade33a1ef1cd2c24f23f9b54a2478492383cb717683536e5de4a74ba81cf52b5108d61ea5871236cfc1abeeb73f37c9d08bca7da46a530b09b27ca1911c010ca5faee916c126789afebdc306265a0ba54b70284d2f978d45014e4cc86dabf483a47e39d82c490d4b6c624aeacc4961ae686d67ccb78f18e081007e6090f1a563020ebc42f0e51f772d5675c04ede8891843823066e6224b2a17500eaeda2c66927f4db8798d8d6208ae0d33bf28ec66d0919d10ffbd305b3a5ccce80847cefea83fc89", 0xd3, 0x400}, {&(0x7f00000058c0)="d4f235816bc249d28e40674fc5ac1dfed8509d4790da1a57cc07c871d6762574a6ed4ae1a7794589a4ff09e19983cbaa26a6b2711272f5b5bf55b6f172d33ac6f5c49ffb86925a51d429094aff546cccb5bc25bd9b3ff0d130c0f0abb897dc0356300bcd5bc995ef25aeeb0fa55e0cb2e49c21572ded63264c8303d89c71f5dd9b2032fe27844097248ca8ba9e2dd2bd073210c873563d0701bf0dda4701939ccd024e5ec934585a8db4f7368b068b40e93e021a1d03b35b5860fec0e2d4380f9c1c3a5d2d6a472ffd5c2d83706454a508f10919748dd0bd9cc35cb5e236de4a59921680e3f47da6", 0xe8, 0x4}], 0x4008, &(0x7f0000005ac0)={[{@auto_da_alloc='auto_da_alloc'}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3158c17b}}, {@nodiscard='nodiscard'}, {@data_writeback='data=writeback'}, {@resgid={'resgid', 0x3d, r4}}, {@journal_async_commit='journal_async_commit'}, {@lazytime='lazytime'}, {@i_version='i_version'}], [{@dont_hash='dont_hash'}, {@obj_role={'obj_role', 0x3d, '[@+#'}}]}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [], r6}, 0x18, 0x0) r7 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000005d40)=ANY=[], 0x0) mount$fuse(0x0, &(0x7f0000005b80)='./file1\x00', &(0x7f0000005bc0)='fuse\x00', 0x2000, &(0x7f0000005e80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000000400,allow_other,euid>', @ANYRESDEC=r3, @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030332c6f626a5f747970653d6f626a5f726f6c652c7569643ce1771d0141aa516255ed4e86a6cae05b5b191b4eb6566a032cc3a68fb0e43102857b20951027a5c40d9a5e85b90860e5d6138441c41ff96cc65764e2f7c6aadc022753205f667e57", @ANYRESDEC=r3, @ANYBLOB=',rootcontext=system_u,context=user_u,\x00']) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x80000000, 0x2, 0x0, 0x2}) syz_mount_image$cifs(&(0x7f0000000180)='cifs\x00', &(0x7f0000005d40)='./file1\x00', 0x200, 0xa, &(0x7f0000005540)=[{&(0x7f0000000200)=',', 0x1, 0x9}, {&(0x7f0000000240)="3e2e202898b01ffd3227c8257c90b59881854e3949f1901485287dd08cbd90958aae4ad99dbc606f7f4523a9d73d2f2bb711e27602df3d6f9a550fb998868cb7396c0a1c3b3be016fc8effda3ba976bc9ec3f478e3dc3638797711f5ef562d641395f6a987d04b98c696196376a3e294939ac8", 0x73, 0xfffffffffffffff3}, {&(0x7f00000003c0)="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", 0x1000, 0xfffffffffffff000}, {&(0x7f00000002c0)="0c50fb984aa631e8f05b498f9c4d57b24a8a91f315ef1b17d79062d8bb47bef68ddc33721e0f008b4d697f2e44618e", 0x2f, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x1}, {&(0x7f00000023c0)="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", 0x1000, 0x6}, {&(0x7f00000033c0)="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", 0x1000, 0xfffffffffffff978}, {&(0x7f00000043c0)="8b4ddd1d77a7423d6fb6ce58bbb1501d22ae8513e5715199f8265d9f95ca9bf9f4a4def659b747831b4f30d3fd961d250ac603a364359d094e0399c670247ff08481401d869f993622854abe70ca00d761ed4930c9a63a5ba7bf86eb304669de2245143949e9716c169f305a1e0f3a5dc519e3c07940f46aea937135db02345c2eedb80c9f03cdf0bbc3196152ee73c092ae2cd595332240c131245afd519f5f5eac0ea39599618c92050abb482bfdfb84b2e9b41b93ad4f3f3ab2e53d6c46ca", 0xc0, 0x4}, {&(0x7f0000004480)="58a54ff3bc6fe645f032be59689e09ceae5d6bc883b4ff031f1af5f81e7ab97e37503b026a9b89488398984df8fb44506a68868390c62c3fce69781ba66e35f1ff9bb3cfd68c15b21c8e426167ff7e84b02434d3f859be01e7226cafce9d1687b61785cd823cc57f3df6d7e97e410977bcefb41fe62309852c05e95536abbef2dd426e4f89ef1129e94a88ccb2f181f522f7f1f1f6", 0x95, 0xfffffffffffffffe}, {&(0x7f0000004540)="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", 0x1000, 0x10001}], 0x4000, &(0x7f0000000300)='dots') 03:40:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 791.786374] overlayfs: unrecognized mount option "> d6&6ß¡öJ¾˜H%¬6\$ãU«ÒKŽÙ!P_±­:ý@÷q*°`Y+‘ci˜U÷–‡­E" or missing value 03:40:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 792.048389] overlayfs: unrecognized mount option "> d6&6ß¡öJ¾˜H%¬6\$ãU«ÒKŽÙ!P_±­:ý@÷q*°`Y+‘ci˜U÷–‡­E" or missing value 03:40:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e66733d6e6f737461fbc85f726f2c00"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:25 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000080)="fc7a2ffb104f25a0e5dfe447b1ec243c2d1ec9fd3076aff03f6879d4003aa2dd62a16d2a629e7be98def45aa220e4c7013313b1bd7012e41de0cfd0747d83f94283952debc7aaadca3e1a44664a387f563f3748109256d9eb1d84ebe40782f384fb61a76f67f7269c938ee53e128327bb25d7c86653d748e6b573722571bed", 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200e40, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/208, 0xd0}], 0x3, &(0x7f0000000700)=""/125, 0x7d}, 0x20}, {{&(0x7f0000000780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/117, 0x75}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=""/113, 0x71}, 0x1}], 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001b40)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x0, 0x0, 0x3ff, 0x1, 0xffff, 0x7, 0x2, 0x8, 0x1, 0x101, r0}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x227ea02b, 0x4, 0x1}) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2a12368e2a1d734837b1ee9d67d6722ae35b21e29eaf985096a509ec08adffb10be901da04d12710feccb7af8e49d370b64f4202688c7d46"]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 794.640783] overlayfs: invalid redirect (./file0) [ 794.659284] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:25 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:26 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1}) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0/file0\x00', 0xe, 0x2) fcntl$dupfd(r4, 0x0, r4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000180)={0xa20000, 0x0, 0x1, r4, 0x0, &(0x7f0000000140)={0x990a2c, 0x3ff, [], @p_u8=&(0x7f00000000c0)=0x7}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000200), &(0x7f00000002c0)=0x4) 03:40:26 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r4, 0xfff8, 0xa7, "eaca3585d6e4ff7eb2c7fa2d465bc9000000a0f7042d200b4dba665f3be8ba823453d88e9a16ae54aad5c7158eaf116b65a1168afa717718de6480fddf9d9aa85de7573394b6494f81812c7466953afc5c94921175b5f2e42a5af13986d64e7806b9e0bf48f4db2b50e9635c92ba5987e05e3e759665b862a967c1ec3992f9f603f3f26b0574163fafd1d723d6fbca25f3cc62226752f5caf957af8c1f22b0351ceff31d50c4d9"}, 0xaf) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x4}, &(0x7f0000000140)=0x8) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:26 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf7ff00", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25010000000c00060000000000000000000c0008000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x24000080) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x470200, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0xb8, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3216}]}, 0xb8}}, 0x20008040) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 794.848442] overlayfs: invalid redirect (./file0) [ 794.867306] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:28 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fcntl$setlease(r3, 0x400, 0x1) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f32c04619c5d5fd4723d2e3a66696c65307765f1566c9b5dd2d3e23d41638239fdca4703d1c330918f29da0edb67394bd1ce9203792f545f4fdd1891e12c3fa65215ee126c030f87d532dca1d035fb0d5e709e65aa846c2882a3b701f061ea65000b6cb4da2c37157824b26b6272bac84bb7544b3ea5ba3abf3bc8814d90db0c6d33c52d888fda3a43a2b214a1a015cde9976ab11569eae76046fe72485f96419749e83d7555b7cdb44666632bac5d83787a68957bcb96f0f3ac62ad330cf356bc231cecc97bf51ad8a2ec58652630212d508fb4d64c3a054fe4c9f25274b429851b4b85350a87"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:28 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000040)={'vlan0\x00', 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r6, 0xfff8, 0xa7, "eaca3585d6e4ff7eb2c7fa2d465bc9000000a0f7042d200b4dba665f3be8ba823453d88e9a16ae54aad5c7158eaf116b65a1168afa717718de6480fddf9d9aa85de7573394b6494f81812c7466953afc5c94921175b5f2e42a5af13986d64e7806b9e0bf48f4db2b50e9635c92ba5987e05e3e759665b862a967c1ec3992f9f603f3f26b0574163fafd1d723d6fbca25f3cc62226752f5caf957af8c1f22b0351ceff31d50c4d9"}, 0xaf) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x7, 0x0, 0x8, 0x20, 0x6, 0x1}, 0x9c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x1c) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @remote, 0x8}}, 0x24) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:28 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0xc, @output={0x1000, 0x0, {0x1, 0x8000}, 0x40, 0x40}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = dup3(r1, r0, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="5987e61908b40424e8094df5f442cc8ae0ea084e16194d94f08272fb0ac36ccdcb7912afd04a4ff1f0bd269ebc6ff3fcb0af0638d360f49d2c8503c23928bcd9824d439bf6544d5c5040f9a2e0836892a75bdac988801f487c25bf495e53a67076a5a4dd1ebcb82877e764ada7554ed355ff354df380dc", 0x77}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a24eae0b9522677116eaedf72ac218a2289e536d65e5133c4012610bb666cc2807ca84f10801b5b410747c05d57032dbaa59ccb6a8472c1c4bab1d30109da3fde01ab33b739f4171187a6b33de8010441c5aacf31f371c7f4cdd3282263d79b34ae31875c4ff9758ca9a171b091bc34d53f68eab4391d64964afebc685a6292a9c4205f53a7bd5a63cba2983a1c91090243ea23b666d1234ba96b87c446e98b51d1ec2bea3947b80b2982d81cef1b70cc05932a720730e212c4a1f2084eee1cbcf188eded0e632b58a230db6eb66731386c181b1e0bc7aa5bcc236ec5986e6607c33f1aaf82bdae3e46acfa2134782fcb3ed796e0dda2bf5", 0xf8}], 0x3, &(0x7f00000014c0)=[{0xd0, 0x100, 0x80, "53346e8ea300fdd97b6a5ebc0c648370bd37f4a1c8ccb0c3f2673e893186f94d4e1fd21930e000a60310aca6167a828feed8d9728f34affc2559ee85decf964f9f942671276d686d78668706418f847c08bb489e3da802f960b87f09ab3fb73637f07d4260a5cb2e0eb0a182740fc4f38361ecfea53d7ad3075c95569b83d974c996499b7d8f0683f38aac4cb9b72f005501c97c730df05811a2dfdd0755995e9189ec814958205c9e6870ef37029f70b78bdb97b9e1bb1f2f8a74dd6e7870"}, {0x98, 0x83, 0xffff0000, "dcdd5d6a3f58f4627994f5c120acaec57b3a23e4a094b4e7c38791b7fd3339457fe412c43997864d07d09ea137cacd167d12eb22b896f549de800d8445191d2fc9d1b7144686e34e331dd7eb0e9bacf0d1075780c3f009e261e7c099d6b5885255c0aeaa0b6a74c232917ce77d331dcf54b43ed2f242e7e2610fc715929c64f7f592f3a93fc8ffc0"}, {0x68, 0x10a, 0x80, "89f8c672f335d934928b76c47903f7def1d4166f557d61294cffe2b0f6bf74b47aac1b3303630d3ee7c059f8a018d06dfd5af31e35756b4ed2fc3f7219aa6fbb6ea887d1d3a68280e6b33799f83a52a2f7a1"}, {0x60, 0x1, 0x5, "b91bb737c7b2b10b2fa4ea5685ef8651428cc35ea3e4e10d45373d5f5b0cbc33bd967415e783c78c1897b3b77fc44129452dd350656e856bf483e1c45f1ea64866ab2f31e5bd866719d7e92c7f08b0"}], 0x230}, 0xc050) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 797.651413] overlayfs: unrecognized mount option "ó" or missing value 03:40:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:29 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0/file0\x00', 0xe, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x1000) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e0000696c653037e37e18581804d1aa8ce31bad8ab428ceab9dded7fa32910000000000400000b9404717f9d984deb1ce567d2d8b6545cddb923205bcbb27c1f1f039054c5a779042ed3809897eb9ead8345c700e8a6e586e0ecd65a8edc117e25738bf1c38f5115d73785497756817c4b782f0334859fcf38e994cc6c8a724681eaa99820b131fe85d1041bd7e48973a8f3e8a2edfc30d9c323ffe5319701743b228457303620f72c093b3c3678c190fb69e71fc584b875dc1f250963122af8abf549abc564c0191465f1eca2cdc3c1f9b115031ab4dbe9c0b18d96e5213e6bbbd8ea6473f4e"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 797.726699] overlayfs: unrecognized mount option "ó" or missing value 03:40:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17, 0xfffffffffffffffd}], 0x800000, &(0x7f0000000180)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@uid_gt={'uid>', 0xee01}}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x274, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0xea, 0x24, "483cfb801a472ebc2234784c41f5ec913b394af6fff26436a293250dda38b3ee29462171bb9fec2adfae10bb2d2af65b14f3b9ce792be9c79f87367629a301929ed5d2369b5dbf57cbcad7b04b0a6173309f3b23239431e94aef2a5f0873479ffb327aa8ee4a0387578c58ac4ac7e48578e36db65e62d2770141491a6b32a3828a7477a3e7bf7e463600d0e6186a0e53a93e702123e2f7eed14ca2c21d4ca4dc51bf9cac1f592ec73f81940ee932bc9003d50f2447d631aed7de99a3b2867d842c9b0884ae969ee9822e0be0e239ba42847c29457a3aaa99985fba9e323c9c36b4695b8b54e4"}, @NL80211_ATTR_MESH_SETUP={0x158, 0x70, [@NL80211_MESH_SETUP_IE={0x9f, 0x3, "625a0a93123db82d89b56f0242a3d931f2060a61f7baeac40da7e6c92daa868a49da8b689ff0f6812878c779ce7cd501e4cfa9ec11418b249dc9dc089d5aa513bf019e5647d16f48222df6913fd3db4b9419ff065036e280ff273e08cc8edfc01403239bd5f560e21777570598d4b6e940686ddede2edfadd1c4828efe5dbee6e1a15abaaed1a532a33f2f38312ae108684642a66703e884051ef3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x95, 0x3, "1d50370d011a1346143596ff102552fdc97f2e152613d0676477925edd9f8d14cc35f533aab5a6ef92c564d90a4886a7fc535e4e0ee43128a1f0757ac95f51a66449edee0bfda22e951ca67358303f47b09be4a0cf1b524c63655d2bf61ac091df02179e1b138590678c3ffa9ad044252e29e7cc176e44523f3c56a75491798c7a04e84905ffdc74985da8f972462ef101"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x1}}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000012}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x322, 0x0, 0x4, 0xff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 03:40:29 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000140)) 03:40:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:29 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x6, 0x3, 0x3017, 0x4, 0x1, 0x8, 0x2, 0x7}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0/file0\x00', 0xffffff79, 0x2) socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 797.825978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 797.845011] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 03:40:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x1b) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:31 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:31 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) 03:40:31 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:31 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0x400000000010800, 0x2, &(0x7f0000001180)=[{&(0x7f00000011c0)="488fa47368fa9a13349fe65570cf4b24569a95db4ee6c1f23acfebd81dff7d0ee05466ff11f1f4c8f118e8f55328fdabb5cd39124042de58d09f912ba0580694292cbe4ab6475b936f3b3c26ea5da6485eb76365d38dc32f362672e4619439c37fc346c0518ef1a35b5c5e060c7d38ba88265659fcd2f27d713bd93ebfc8daf446292bc64884501a494231196f9b8611838182088ba1f043890bd12e61a9e5f90db96af709100456c183a279e1aacbcaaa7dfe327320a50f3bfc8ebb05b0ab84d6df5644ec5c42212d06431356cf73e9894ce9a6a06e7bb9b7f1e28a3f0a2d1bfeaf35f9024bd9dd2fcc1fb4f99f1d0dab53c8aa2f289bb90ebc020f92716e7138c23d3266239838fcf3810df444e5ab19d618d2b0ccdc4ba6f674cb7f1dbf75652caf8552d125510deeded2015fbc3b5f3fabfa05daea2340298bdccede4af49886befeba01194f5c8330ff089631f4659c4c9038af92e4af244dc28f91541162786dc1541445bb4f4654ac8ec0769f046ba8ba9c6b2852aed66e62ad2bd30904734bdfeddcec8e7de9ad3c0b8eaf4d15179284e25c9eb8d584aba1575b47bcd347c685c85aa9207f02e729544f0a2a503aab31973e9acbf096e5c38fd9717ca874375c2c6b538e700bff0c74c35298cdf2abd5cef7024e2359a43187b0692d165d08ece7fb902a2b72effde0b6efc204b0e2a38aef4323c07e5461ace3ddfe399370df3043deefed47a0f04a35607c590bbd186849de25510642f2ade6d1f1dcd7806e1b43030a6e2144f727cd31bdcbb3fd17d867c41905b079aebe8af22143c95539d951db76a21c78cc28df8f62cff999544596d1607cc4df2b020da27983090fb58ad2c2c684957abd91dab6abacf853bba716077f8b3a1f72ac0cce57f36b6ab9ac9034196b97cbc18babd688d63d858b21cb35bc2e0e144d951222d87ad36148cb3def0ef411ab96fffda4a67437ad99138c89df47f1e748bd8e1289ed97fafdc089e2f6284e9cf140c894f9a3fecd332e1f5097d9172ee1fa87e9c4ca4949bed44eb799c2f9b9f45a1e124c91557314cd0dc2ecaf9865948ed83f1a35fda050a6c5affd7c6fa7ebb48e4604a662f7350c77ad887c37c6e3ffd5521aeb7c02a6a1f5b9365bb04fa974ab6b0b2b941a98c221cf5b3dc67d21dc97fcbafc51ac840155e9306c00acff63b145f4e62464734edc989e750c738562750be933a42b0b3d9650c7240c2cff78ddcfce54fed2d470e8b8bc4f9bdcc081671e68bdf860fadb504f1cd75b7ea68ccc67146e6a0d21d168482e969f65709497b37443f674999fd59f6f0e953b408d3b1b92405f0e1de3c7068875c7639af75e229e3341d43b27540e061ee1f902ae5848d9269c9e7608342d17f596529669e9dc91cc96b14a1d13d2986deeddbb101bae66ad7786554d839cccb0547d9c51f9d6e7d13cf7ca7014ca9634751d2eef37f9be1d1c26f59fb0ef003728a03f2a4e5a369b8c25870f7df455fcb393f24f5364c325eb887669f38e872907861ea077fa8e65d0c6a1482b4fe5b846b2651d6dc2282deb4e8c3af117ede04ea437efa6d505723a8611562bdad131e5eba4c94164f931d39576419e12aad3e1249549570220d596f17fbb42da9594d009f80384728c8a02f088c70d0e1bcfd573560d51e66dc4e818ccabc4898bf7ecd83fc16f0d5690bbc39c782e376f69a7ea81d65f9b9756208a102a85408992857cee6dba24a634adfe6515ddffbbfe719ca118b5d8d314460e4a82d68b21835f50fe279d03472898573cf5f39ca8d5f37aff8746d7dc75c2c41b676f5c16a0129c49da4007caf97dd2f7c714bb3ecde20f31ba781740b00464e483b23add98312561c80d458285387e6550a3769754cae7c21138172e0c6fa95cc5218c5081e2fce03db3c48be3d8e493ae0b18fe7e1ddb403d5c87f725ce3cf451eaee935c883a58c536aa7c686a70928804b45608f7c8eb7a1b5b5075347a366bfbd56e5b238a9941b4622eb5ef2eb3a08a9d175b12f1e68fff3f6ede3686f1ddb03d7b1c7cd5d6085345cd92295b66a84462fe986a723ab4cd5940fbbcc70133c9f65c7c95a7625ea52df09628f5fbf9e34290246e45fd558b23e29f95a7d9b665f9d7167c17296e80c9463d2267e0b3ca0522c0e9cfe595db11463e9d31f6129563aa3e1133083aa2d8183b83e0a7e26df8d1dd04ad94a7fcdf3a0ccdb8fa4bd61ad91fc7e4bd8903523edd4e7a6d18b1ca2f74eac88e4aa49e121836829b79223ce4853286f7ddc09fc5a692c5f6e061ee3da4ff7e4dd9149a95c8dba354a878a14c749c4bca78361aa4144cc3dca541eb25bbfdc765a7206d46098df17f0f7c59b10a9cea173edfdf813bfeabe429fa82fe75e1412b103b43c8fe7b9077dfef70555e0d770f5351286d5a2cc2c1e3f59e1ec9c0b3c57cdd59b808193ab292831593e3830e3b7b19c68a149032089f4673c93da12af1b961c6028687a8b03dd378d6602e674882c718ade48f1d6fe6c481c9ac8ad2257b54ee8e2f56ee13a43d56fc0f99289154a331a1010139aa254a04cc5228920a67d63a2f39c6940b2d23f68b5659f21b4fcca313e80a33ced84a91194abc68fc7361d66784eb99fc44a4d24d8fc5e9f02c4debc7aa7073778e15cb11d700310d3db59c14876aae2c663d788e504148598de1de93139bd26a6863b76f2e83cd06438f77caa97930478fdf1f8357e15f8f72eca2f27f87f341228613ae7cf15efc50560eebf1e55b7005b64a04e171c27eded4c727a1e20f3f82f7eeee733a4eb56bda494d3b962013acd189fba6041979fb275ac12278acc3b647d91e8bac6f8957d7693bbe8fc69e0374b4ceecc83a6ba51c8f7bf1b53b493bdaebd3e85214f648c236f6e36a81fb20243f9e458160db79c02180b88bbc9657073bee6681d4dc5eade42c5ec9026d731ba68162fa8bf1af94c6d0582ec18dee6fb31bfa9c5748a772af43a88fe4e934d221a89662e6d67c3da81489eccc4cc749c793365faa7fcc3d932a65dc66850cf1c009230a086baf16cdd8986811919a5e0f5592fed6f0556d1ceb61cb951d41833cd7361241560996cd541924e649f8590f936e2070aa3411ffbb2801226c645f6a99e002e93bbcef1bb47eb6db3bd2f3f4ef0360be9c92796a8f024436b8b82444628bbf04c6ec857f5d9aff73c55597f745f86e6ac099686e634f14f7bc3f10f8e4ba75c4ae683659a53a6a73f09886732ab02ef44ba7e8e58df7812d1a39ac3049e160616848702f9023a52c64f0be42095ff947ddb9d3792999f23e4f1a6d9a1f7275bc50f52538f9bd91d2a2b3e6e5e3228ceb445375964d5800dfff616745144a61e4da10c02093d2c6ffcaaeb59bce326988612b6bcbd76a770071891d45d62c5ff1fe22fedf952b9f868ccf11be1332b6156f42ea45069f2d733eb491ea65af841925bdf98004f5949a6e68d29c87939e0fb4b7e0fd5240b2212aeecba79e5858119cf720d9a92b9b79b1822f70429a120f27f05904a31e2ce342794a8144304cb94c7d710d7e2bd4af9f1c6f9373e658c54856635029d7ca4602a5751b4f2658fedcad3c5bedeb42551a4253bf74d51971150476214b8a95db78a7e38a549b72acd3206e10866f07c1b012289ba3833015cd4392be6b2744b9d83679bae90e7873420513949ca245b5f596f38b26cce1fe13285f60f788832fd61668b5d2ac5df89161e2f18802934a1ad94c3b2e675f582c9d46b703fe54c11feeee54e150934402224ceb8362260e5878c50bac58013b4fac062a3e5f2e0cfaa87592200dbda7c40408ba9d3561ba61ae68ace40207cdc0986c3d2994d97dce408a7b32ea7a758cf25ff4863f0dffe873b55edefe02d7ddda8b4a3f85912186a34239944da27dbf3dbe329d0b30bd7da188a01442063c0fb99a5c6e49c1f2f0225946c98627aecfde24b8694dbd133f5bb4088a6f970232eeacf784ee0dafb979aded9f77be542e05202aa00166d1ad6b9bd28eb55a0f3f4c8bfe12cba6bf79d4578a266288f70152c3f0586a9a090f702dbfb25778380cab7377e3b09a01f5058fd7469c9190674a81049b61fb74c85d89926500a0a9a07a4670e8092fae84c70a961c8ec9c7a09dccd7daa92bb8b2de31f8b3da9771fdd59b768576a07628c513e57d2215513174e400e8cf31d0c0e18d59b5adf901fb3a9b55139e15601cc9f37cf745e6e2dd81b8ff0ff094a42c84dc58ad9b73dba0f7be375efe3f7e8905b88c8b3def01f9dbba2176de0c1ef09761556b4a6212c0aa83c5d1ca7e6f720e8bee50985c2cf9093a9e5203e42f5ac3bee0da6895dc66afdc76f81c6ee7020a035361e28134fa53c855221f68be32e9eaef87b187e5458709c449cce5a84af7eddf02da6fa78cb15a092ae77a45dbe867ca717e28d14d65a3ecc723b19caf848b7ce50b5655e5490660622606b44449c504ad5f0ea694dd6bcc8e303c741babe7de2ed8ad73c90e8acde0f0cbe0c1ac62ad1a4da4960b335c37fe1e6203ee2c981b062b4eda7610693819cb2c950d1c5139b25f20297990d5dc886bfe07e72896600512a58a63de2c2358a6e9303a690421e4569d137f2338bbfe64b2b4931ad8bda941df75fdede3419a850d97f74f1165e58c793fae0006f880a4ea06c6662a816328f22716c96421fb3285e01ddabb6ff057661cc4664663332c81b270e53ef1cb54dd22cfc6a362b5061b575bb769e15164b95e0f859d07dbb441ee6174227f3c2a2f472204b9a6cf798a634ad297012209177e60260ec953ebd96b68342f3150982df7b0711d0c3a8436f1f8638d15ec7d0d884491408a4f70d6c02ef137647b6bb43cabb5080ccef501eae0b77d769489e7ecc0550d9d9887af44b418368810a344a5e9ce23b4a2992872731ceb4b727e645b85ea884de9b3cd229b9cf498d544ef8873fb95713d84e0c76471bbfc60a6bc4505aa4e152d88556df7440021b0ad1e3eb14bfb1265291c6492c5128c9840b2dc4a996468b83bfb355d0a358e87faddaab49200eec8b275aae754c0df2f5c2aee62b11e78c01092a1a91156b3b5d639439e7c665654c7d0ad374c3eeb8d3e2f7d198dfd0160f584a45d1344f41f4166b339caa714e5e7d23185c3ca8dca9e3cf0f1a6ca8b714ee9fd72d5c0e79a7e3511879bc560cc371b342e26150999e67594a68ce81628a96c39fcfbb6eef76db207db0ce762aab82e08a919e1be160351fac4b57951d9b49d4ce1cd9780500330749e1a5e388413cd8b2d1ce2a8063874910b8cbaead85435d7f6ff99d157c8d449a48b4beb74f067126c61a0a1f7e3ea8465dfc824a17af8fc724c50ead40e1a85548f772f05f868161959f11b6e544329710d83f930c82d0b912be018b7e61a29edb4d27d34e5d10852ae44e8eda823573b8a6f895ac7ba5dd37eb4c6f2d4e78dcc8ed5771fa940cd0bae00000a52eab966d63864ba067b64c7100ae72d6db42d6bfdcf97866e8d7bf46e782a81988014b440c328b8d0ee9998b0452eb5bcc553b956c7c5bdf62f06d72d45b03f009bf977cefef98c4dea8b196c18e15e7708445a49ee9e1c4400c7f165dd0853b1cbc18d7914c217eba6907dcc981de8464a74fe7e5c49cb6317e81e79cfb98a6781909bace4b2235d7e35c05c4d3341343024032898f46e0f452e3a8314854f645118dbe4169b5b4ab09604a3c51c0dac2096396eeb9619a364d8b3f0c2e473bcfbdadb622d10b6b53c1d2e50e102beb3fa2cf894c22693583aa0287c7753971b41a0137602bb3002076ca44747192cdd2453c05dfa21d75758a5208ef522d2584b4f93a1e95ddb355afd49b964058b348dfaaae91d2c53475a62bc25363b", 0x1037, 0x3ff}, {&(0x7f00000000c0)="8e1ece8f7a156cae1aec371ba302ff741737110bd0e3e828909b0561e89d8ed76a0e29d99ca227e049ffc7cf6587d281a3ea8629fc00245e4335a7", 0x3b, 0x7}], 0x0, &(0x7f0000000180)={[{@fat=@nfs='nfs'}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x22b}}], [{@obj_role={'obj_role', 0x3d, 'LGPL{vmnet0locpuset'}}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x169040, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f78746d6f641efdfe5baf9539c7db49653d30303030303030303030303030303030303030303030302c75736572", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f00000000c0)=""/12, 0x6}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 800.736417] overlayfs: invalid redirect (./file0) 03:40:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x9, &(0x7f0000000800)=[{&(0x7f0000000200)="b27e9a7ac82f31a0c14ece1b6b65e52b5e6177ab981473cd45e83efd176096751af59d270537016b1e794f2486346f7caf4ba9fa688a309003263e382b5202a9885b1865bbe3fc3a09f25389420937b3994c9a6ca38af699ca11eaa848b57fbf163e8952948b4e54a21f8248726d77b6da4fed30161ea3874a69eb4c7232aa0fae42de593cc2c232e13e8512d4bb601fa1f0d1bd201dddcb5460db95cace19464e5c46ca9983b6dc98760f1f8278ef92e18ec7c3c7bb38b7", 0xb8, 0x40}, {&(0x7f00000002c0)="5999fed4caab1974b7c45d22fb23209f895b059ea239a707fac6bdbec2f8a739865eacf91bd02748034a", 0x2a, 0xb0}, {&(0x7f0000000300)="629f0ebf7504fb7b6934cb45d9ecbe0fa2b900c68743391c6a58472e51a7eda9bff76ab4b4469d", 0x27, 0x7}, {&(0x7f00000003c0)="bdc25c2e18179362f6ea1dad9a0460b10f408bddebf22e03ec0c1f610fd1a9bf015e3786b9817205e5f132584b966caeee71a05c0b79b15d8a6fcbe21cadb6547c9c74102f3de0e43ec7d8de0850bbc34cc4e0b35addceb88b31635fa59259dc4f62474e2fae572e5114dd0e370cf84bd0b6c34aeb9cce8466655cd3832f8528c353610ba307c854843ad9ff75ce74da3775456f700f6c0c01f0caaa7ec7606864175ba0d36698fd1619ae0d2fcefc7e1af7f8f6a203711ad7535244cd7c6cef1dfdeefb7e6f0105437f22c44e2d35333048ca266e1881aabf7058a6ec6e6b75944088ec5dec21df3dbbf473602c528ad6fda14f15d62c6e5df0", 0xfa, 0xff}, {&(0x7f00000004c0)="00215c27c1399e9e9ba80411034d4715b7defd797081559102f94dc324fcc630d283366342ea8f3cb956496c5be3859ea0bfca7a5a3f19363911fd150628b7a0d1fcccc78079f6d5b10e7b0f2d0014b0e8de74261fe255286e54224658ea51fbe21f79571edc1266d2dc55dd02d6b7ec78df32d596667d67e0b7c06810b18c99c085f58f220ea96f94871c7b209566de57a46e19b3fcccf058bf8c0cfd2ccb0194c3132eee55745e416058164e997b35fe271dcf844a894c591cdd10dbd756b9bb288441f72dac0eb3646e6c3dad3e1acbc7d3cfdd9a0e4e3b0a9d8a7bfecacb8002078e91ca42e94838cefd32385bfbc0", 0xf1, 0x7fffffff}, {&(0x7f00000005c0)="8b86ec88aac74c68898ef1cb7fec0962a9bcc918e46b2ba82956ed7ef8619742e28b70af4762e6de2601c492ec283664a1494f4c5f653e92f83b5ebd54c408fe30362b6a853e9f67460e", 0x4a, 0xfffffffffffffffe}, {&(0x7f0000000640)="02b0e8ae0b86b11365b3e679177c5075ccef5d43c9ff72d71c0aff02c272b5d45599762fe7d44d7c432afb7376a48614df610e3da6fa5137bb8899d5b276236e578251e9a53936521992da8b8b423d71f8bc0a770d958552577bd4abf8a97b4f58c10d7f5b7292cbba20b9d403d4ba3566b0e1c965ad7f4c2198289783661429e1919ba1a457f708a85d8a8092e2e9972f910f49bed390275317740ec40a7f77c1f044393c", 0xa5, 0x4}, {&(0x7f0000000700)="670f9936624a94fbcf273d5d93dbf81da4b34709a0e381a16950daa466441ec3ba85cf99d9c607e0ea9aa92e9a6da1bcb0c47716bbb8796dd1fe5fd1c134eb9214a4d016de8fd54cc22bb3d7781ab2c7243551bb0c280cd5547693b46ba55cec7cb1d576ebcba2e9d067ad724d045182221c8d53c314051422c778e259729b01fc1036dad01cca48b31e378f67d367b4cac011e2f865ffaffd7075ab77d5bed2e6b08c2a970e2322e67200b7cb0f678b9a07526b720d6df25682bba434aca343001bf0d43aaabdef9ed4c9b0a8cd868bb058b2bd0c1d9d5aa8978315b29eff084e43ce25da6d2b5b269ae619", 0xec, 0x200}, {&(0x7f0000000340)="966f66ed2cec44242007cdce50167da48df2d9fc50be5d6a04dfd64dc026e7cfdd809223edf7c1a71c28513a82", 0x2d, 0x8}], 0x489, &(0x7f0000000900)={[{@fat=@quiet='quiet'}, {@dots='dots'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [], r1}, 0x18, 0x0) r2 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) lchown(&(0x7f00000009c0)='./file1\x00', r1, r2) r4 = syz_open_dev$media(&(0x7f0000000940)='/dev/media#\x00', 0x6, 0x200002) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000980)={0xfff, 0x1, 0x1, "0a77ebf249c83d75459ad1669d598527308108daac5a964dbb9770b3fbf63c4d", 0x32314142}) mkdir(&(0x7f0000000140)='./file1\x00', 0x40) [ 800.757623] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:32 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x1, 0x100) 03:40:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:32 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 03:40:32 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r5, &(0x7f0000000040)) 03:40:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e66733d6e6f7374616c6507726f2c002b41ababd36e"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 800.968032] overlayfs: invalid redirect (./file0) [ 800.976434] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000"], 0x0, 0x77, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:34 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:34 executing program 1: umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:34 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x26) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000d503000028bd7000fedbdf250d000000070100002e2f66696c65302f66696c65302eddab539f016e"], 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000800) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@ipv4={[], [], @rand_addr=0x10a8}}, 0x14) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x40000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB="2c6772df6fa88e7233ce", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000140)='./file1\x00', 0x5) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 803.776700] overlayfs: invalid redirect (./file0) 03:40:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="6d6b66732e666151000204010a0200025682f801000000", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6660040000003fb39b5c0000006f2c00"]) creat(&(0x7f0000000180)='./file1\x00', 0x120) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) 03:40:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:35 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x40) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x8, 0x100040) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setsig(0x4203, r2, 0x100000000, &(0x7f0000000080)={0x15, 0x1, 0xfffffffd}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c6c6f77657264000d8871c08043b700f9b4cdf0accd0c51723d173a66696c6530317aae9f0185df6fb06fa9f31ea4c094257028ba40bd4eb18ce98c4666c81d25da3fa1b432b2d41029cbafc61c3ba32d6c804d446d1bbb5e149f9d654464b3aa0a169c239562d2364d5407557ba98a70cc15959f679a87"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 803.817018] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e66730da8a5d918588d2aa66799dfec"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@dots='dots'}, {@nodots='nodots'}]}) umount2(&(0x7f0000000040)='./file1\x00', 0x1) 03:40:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000"], 0x0, 0x77, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:38 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r1, 0x0, &(0x7f0000000240)) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYPTR, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 806.814068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 806.827313] overlayfs: unrecognized mount option "" or missing value 03:40:38 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 806.857597] overlayfs: unrecognized mount option "" or missing value 03:40:38 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x200, 0x7) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x733c6a0a9afe5dbc, &(0x7f0000000040)=ANY=[@ANYBLOB="2c8169723d2e3a666901003000e6ffffff"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) syz_open_procfs(r4, &(0x7f0000000240)='net/netstat\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) fadvise64(r5, 0x8, 0x2000, 0x1) ioctl$BLKRAGET(r3, 0x1263, &(0x7f00000000c0)) 03:40:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906dedec730b6ed5786b78732e66", 0x10}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="62660038b1dff89bdde0616c655f726f"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) rmdir(&(0x7f0000000140)='./file1\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9100203}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x106fd307f4c0382}, 0x4008011) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) dup(r4) accept4$ax25(r3, &(0x7f0000000180)={{0x3, @bcast}, [@default, @remote, @bcast, @rose, @netrom, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r5, &(0x7f0000000640)={{0xcc, 0x7f, 0x3f, 0x1fc, 0x1be, 0x8, 0x330, 0x74a}, "64dcd3a8ba9fb8835cf05998c1c54b83399fcab018d950454d221e058b9c6ca633d96c97ade5209188700dc8172718f4265b18169a1a3eb0bb481f9f6d284f266b1340ea476642ba449e2104ec7e387a056c708f52b838e6f773b9b3b37d9a8c2a64a0d44dd4eb00bba191811123199bc641d7e6e4", [[], [], [], [], [], [], [], [], []]}, 0x995) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000300)) 03:40:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:38 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000"], 0x0, 0x77, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0x400000000010803, 0x0, &(0x7f0000000380), 0x800, &(0x7f0000000080)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}], [{@appraise='appraise'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:41 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:41 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x0, 0x7, 0x2, 0x7}, 0xc) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x1000) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) userfaultfd(0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) truncate(&(0x7f0000000140)='./file1\x00', 0x6) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 809.870792] overlayfs: invalid redirect (./file0) 03:40:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:41 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000000)=[0x101, 0xf0], &(0x7f0000000080)=[0x3, 0x4, 0x0, 0x8], &(0x7f00000000c0)=[0xfffffff7, 0x1, 0xfffffffe], &(0x7f0000000140)=[0x6, 0xfffffffd], 0x0, 0x3f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 809.923184] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:41 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000810000507000000000000000000000000efa3ad75a28fb7caed1b703e4a371e219aec6e7a3cfc0eac69b9e3d97cafa9732bb30090b648aca440aa9deeaed20bb1d790580a00ec23ef16f7d457b51f49665e64651b01cf8c7b793cfc324edb156e6cd5f08925627b815075300f90c20b49207c1b82ef7fbb26026e3f3864c34fffd05e8614982e0ac00881f553f738a25c4fba2c2e679f21cb71069c1dc28c683fbcc0456e854858d5b59f54d6b7949bfdc89c67f794f7ea4bb05199081d889617309db14ee6cb33921bafc8a370c3f6cb7bbb279fc4079bdb9d745bbb5af9fadee31000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0x8, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [], r6}, 0x18, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [], r8}, 0x18, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x22c, 0x10, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@broadcast, @in=@multicast1, 0x4e24, 0x80, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x33, 0x0, r6}, {@in=@local, 0x4d4, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x2f}, {0x5, 0xcae1, 0x7ff, 0x6, 0x3, 0x9, 0x4b, 0x2}, {0x9, 0x8000, 0x0, 0x5}, {0x5, 0x6, 0x485b}, 0x70bd2b, 0x3507, 0x2, 0x3, 0x1, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7fff}, @tmpl={0xc4, 0x5, [{{@in=@local, 0x4d2, 0xff}, 0xa, @in=@broadcast, 0x3504, 0x3, 0x3, 0x2, 0x4, 0x92b0, 0xfa}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4d4, 0x6c}, 0x0, @in6=@rand_addr="fcdc4fee6346e11e918263130000b16a", 0x0, 0x4, 0x0, 0xe0, 0xfff, 0x6ee}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3504, 0x2, 0x1, 0x3f, 0x20, 0x5, 0x1}]}, @algo_comp={0x52, 0x3, {{'lzs\x00'}, 0x50, "a9700b2046db81db62d7"}}, @mark={0xc, 0x15, {0x350758, 0x3f}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2d, 0x101}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8841}, 0x4000000) getresuid(&(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) mq_notify(r1, &(0x7f0000000180)={0x0, 0x16, 0x2, @tid=r4}) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vsock\x00', 0x383400, 0x0) ioctl$SIOCRSACCEPT(r5, 0x89e3) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 810.146185] overlayfs: invalid redirect (./file0) [ 810.172590] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000"], 0x0, 0xb2, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:44 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) clock_getres(0x7, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000140)={0x8, 0x200, 0x5, 0x3ff, 0x8f3, 0x5, 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800000, 0x0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000280)=""/235) mq_getsetattr(r7, &(0x7f00000001c0)={0x400, 0x4, 0x2, 0xffff}, &(0x7f0000000240)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'io'}]}, 0x4) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001a80)=@newtfilter={0x16ac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x167c, 0x2, [@TCA_TCINDEX_ACT={0x1678, 0x7, [@m_simple={0x80, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x5, 0x5, 0xff}}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4, 0x3, 0x1f, 0x1ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x92, 0x800, 0x3, 0xa4a8, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x81, 0x3, 0x3, 0x8000}}]}, {0x4}}}, @m_police={0x146c, 0x13, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x4, 0x4, 0x8, 0x1, {0x1, 0x0, 0xed9, 0x8, 0x80, 0x9ab3}, {0x3, 0x1, 0x3, 0x20, 0x8, 0x40}, 0x4, 0x2}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5, 0x9, 0x0, 0x7, 0xd614, 0x0, 0x7, 0x770f, 0x4, 0x5d8, 0x20, 0x4, 0x3, 0x5, 0x1, 0x20, 0x4, 0x5, 0x2, 0x3, 0x5, 0x9, 0x3, 0x1f, 0x6, 0x3, 0x2c15, 0x200, 0xfc, 0x80000000, 0x1f, 0x5, 0x400, 0x1, 0x9, 0x9, 0x9b, 0xffffffe0, 0x20, 0x1, 0x1000, 0x10000, 0x4005, 0x2, 0x19, 0x0, 0x0, 0x9, 0xfffff619, 0xffff0000, 0x3, 0x7f, 0x2, 0x5, 0xbba, 0x8d, 0x3f, 0x100, 0x7fff, 0x3f, 0x7, 0xfff, 0xfffffffc, 0x9, 0x10001, 0x9, 0x8001, 0x256f, 0x8, 0x3f, 0x5, 0x0, 0x2, 0xffffffc1, 0x1, 0x71, 0x2, 0x7, 0x6, 0x8bf8, 0x7, 0xfef, 0xfffffe00, 0x1f, 0x4, 0xff, 0x7fff, 0x58, 0x8000, 0x6, 0xf1, 0x8, 0x4, 0x2, 0x5, 0x0, 0x0, 0x20, 0x7, 0x8, 0x6, 0x8, 0x2, 0x0, 0x10000, 0x80, 0xfff, 0x8001, 0xffff, 0x40, 0xe000000, 0x101, 0x100, 0x87, 0x0, 0xfaa7, 0xe4f, 0x3, 0x7, 0x1000, 0x40, 0xe6, 0x3, 0x101, 0x6, 0x4, 0x7, 0x5, 0xc93, 0x7f, 0x4f54, 0x1, 0xfffff451, 0x81b4, 0xe0a, 0x57, 0x401, 0x6, 0x9, 0xfffffff7, 0xbc, 0x9, 0x7, 0x9, 0x9, 0x60, 0x7, 0x9, 0x227bd556, 0x8, 0xffffff01, 0x7, 0x8, 0x4, 0x7, 0x8001, 0x80000001, 0x2, 0x7f, 0xff, 0x1ff, 0x8001, 0x20, 0x6, 0xc41, 0x3, 0x0, 0x6, 0x80, 0x401, 0x6, 0x100, 0x8, 0x80000000, 0x20, 0x100, 0x7, 0x0, 0x500c, 0xe66, 0x5, 0x9, 0x102000, 0x5, 0x0, 0x7ff, 0x4, 0x4944573e, 0x3, 0x7, 0xffff, 0x1, 0x3, 0x4f4, 0x0, 0x3, 0x3, 0x1, 0x9, 0x2e, 0x894, 0xeb7, 0x3, 0x1, 0x7, 0x100, 0x7, 0x7, 0x4, 0x3f, 0x81, 0x101, 0x0, 0x3, 0xff, 0x8, 0x9, 0x4, 0x401, 0x2, 0x81, 0x7e0, 0x5, 0x545b8c30, 0x3, 0x5, 0x8, 0xf3, 0x0, 0x6, 0x0, 0x42e, 0x4, 0x8, 0x3, 0x6, 0x4800, 0x7, 0x7, 0xa4d, 0x0, 0x6, 0x1ada35aa, 0x101, 0x10001, 0x0, 0x0, 0x1, 0x3, 0xff, 0x6, 0x3, 0x40, 0x9aff, 0x241]}]]}, {0x1004, 0x6, "c462417453fb171397f222b104173771de2637387d95a2e0029d62bada5c3935f8f9a98e9e4d07e1d0f4a391b620bb9c595ad8b25af52b8ef3a2f4b6b509a87873417bda75def6a680a1b789987b028d1b02acb5a3e49b81c673350f481770e95a2c29d504ac40ed3e0ca5b8e559cb64fa8a36fee890d407f32d203bd768ba47bbadbeb5e4baf867524c66f9be1e0069d76532c8b919610d012269a6a41c6eb4af281e4a17a129ba6d33fa3b60941fa8a57503aff5c9fbbcd6e40a5560c6429dd6a0a0919c574703fe2c09c2f50667526b5103ad028b1bb722013b33f4992cf614eea508000232c25f17433e679e5fe52c91551239460e0b17a50509207972b18ebdd866c25b0d9d47e9ab48e36754928eb04163853ccbf2d583063543aed2152810f80236193456d5f6662f71ccdd6b42057bbd37b49918aa25859d7199f76925b3f3aed55d909b443ee4a45a09e85fbcb8a346caaf37b8ea5b833ef86cf5a3d74938ffc2623f7a8a0e3d7928cf97f7dd87baf857fef10f8edf6740a63703bb1dbc97951f1ae034009637e8375116a15d47399ba9cbb01de7ee26724a2bbfe947a61e5b16daa984b61cd1c7b27c2b1e24b4b4889ade3e46744b8529d3cc5fbedad8a370aedf0d5de7ec9bf270ad59581391828d25a6ff62154a5905ec4f2e84b7a0ec99b5b12467114275728a66be74ccefab9b6e7e5ddde0203db38dd435a1b2f1d3f48260ca094695024569415a18b8eb4c03f53276f24cf1248551e0cc0c8673f24b79393a82d4e15f6b35e258bd8fcdeb3d0f4c4a4004d3316ac3ebb46c27666b230bd54090c43002599bad9c645e2dde33a5c2c41db6f64bc50c5c6eacc1fe2cf742e2c2cfaa0c0d88562fddd3ca0f81b59465424118ecc917d662048ff0871658455fdfc20431701e6161d45d15f56ff18a4ba8d3d7f54decf2dfc989e2d921ae7a9f7130be9e78bfed4db9dbebf45bc13fb15c6ff8eb2b19de2266864a4d8ab935dbcb7c5319036b829e305a4810d68b0083e7008a0828735b2bf41506d24766471e0d51af7c431824ecb905e9e968a5b217be26897ae8198ff81b6e9cea39c33c9839cb10db5b9e47ac7dda17b6a0c8be7d1ca0ed50ea620babde31b9587ce85b3d35751f56b31a8bb832385e8a21f4d694f15d840f14530561d96dab34d5ec40410eaa574712990822d0e0fe7c78a56a19e05836ca3a22d20d5e2a213693a18fb35f0c06623f2f2c60eefc5d0262b2340ed49852b0425137284505e4c211b8cfc9bb18387e1c3ae3b4cd47956c444d0ddf788ae889cee1b858cbfa1008a4444f1be6ed12bb99a7f6da3f86428620ec5db2585b8b42dc702be3f0912424f31e237e2ce67e356554e8761a440d0446e2b727ea595bba5aa9a386594d17dfa6f6a5e1b8e797c2f160c471cd525c3f6ef032f73bf540d5ef8d43e3d601ac08457e7f5c9c74425a419b96bb1740235173d4a17bdead1696042f6aa76b57b2ba264fa8cbda048d89425b106404f1c23ce5a28e5a9f4bbf785ba06aba3ce9d84a23d6a6fafb02a0f9819fbac3d6a55c56cf436a9e1eefcb95fba06d3dc483d2d170fb05342327ed380fa3632c2617156d3a88d305a5abfd2be7900ff86d756f4f4edbeb6e91a879b21c78338fe6d4d3d00021041a09c0ec6ae9df259820f4ad019050234d6f3cbaeae26a8f54bd2927ef3c4a0614389de35d80a604648700846f7e63cf2081026898cb339f09b7baa0a6d9888366c045d3474d3cb7ed060acb235d8b4296eaef8acbd9bb0a78e36f4386d130414eb58fdce4afe3408dfaaf2c7eeee890a327fa93b894dcdafdbfc2f508ca852fdccb94606e7420bdfd41618dad0aa9af6cf731c71a0187ce9a01b368894526d28fcc650db6fc9e8705790bc30aa32cc09cac4ec802917f8c23c026d240efd6ed6520857d89131197d632729096190cdba3692fcb2733424dea17db3973992f7922d51177d89b1a4f415de070925695c6097ac402b14672484130cbff91442470ddcb15b88e0521d90cfd9108a8bc406213c56108fe03f202f5791e7026a6fa6904a5a506f40cb578ed7ede60ba91cbfd65203fff228cad06f361e403e721b271a3b8d4b3abea025ce40f9b7db25fa9513f7ef9c4ef8131f084349b7610716a6bba20d27859ad9114d572f478e8ca214c283cc74a768ca5be7f133d364c6b4c9be8ffb33c7029c0c0cb8ee4e6e926ee035bc349cac6c35d97d8414e66d48fc1d19ac652ec22c4a50d28e819930e7feb088a766327ff16c10f5457d64b32fad524fb91ec24b790d46363246c2e18be6f3289da63e0bf24a9ccae1655c3046bbb87b95180c5cf569deab841ca9560c242fa5427629aba33ab7f5433201c5534e5ef65553a3d5e51b02c852b09162367eb1f6cdf6b0e3a2dc0e5afb259e8d7eb27de810390f6039e702fc7794befe122ac2e8d2b93de169870e19e05944c9a4365d1a3111d6be7b39ca67469d03451c30d21034c3286d0231d9242b8e26c7dd364c45bff6b63adcfa7c91079e29d066094b7dbf7dbbc5bc43ce5d1ff99e4b432d13584c61f24ca1c9109457f98acb5af3a6d1ceb684c07a3c9c977862e8bc071aa54c4a1969117027a4a9de20c71c360d258bb89511ec5ddcf1df1972c9f643fc139bd195348d6e2564e0a048355391b8b784bf625a5b9936bd223251975f89dee4cfe1e3bd255dfe2a60d10a402ceae1b277eeb199ac7562538ec6ba953da8795d1c7b934189758bab0f95ff72bbf82f5819cb41d3dceddded3ecabfd4905f9555040f15cf4214bc596172243f002e4c6cb48b1ceb72946ec5b47a2b2be89109bcf039ea36b7931e8b23f7e7527a230096e4b6813ceb159fcded63f6961797633eaec1804c08cf1fc2a8fd3c18a29be367789bc0869669fd29c422fea094301ca995d81fed0c9103c2a64b05f54757f2f3755c3c542b17723856a2a8380cd6721de25f19f13360a00add91203e1ea69c3ead3be65861249f3fe7f39591de22dcb8c798d02aacb56f2a58fe510146a868bea758464cad57ba1d662473ad0c086b67478fe3296ce7a533760070b039ce6a14a0f48e80195b277bae85b7678928f7fb5eed1d73b5f6c644d2005ffb7d3c68f20482ae0342f58680e08d0aa292594a7f11388d9d4cea34141f859da1608752cdf2aa3d21c19cb1773ac6ce6475bbd6b801cc8769e0ec630a49d12371380cb0bf0f666395e9f24b03ce5609bcb5c871f6fc486a6711f61868109e0558cc964959fca58273fee4cd6acdce9bc9976509cb87b19b30b08d7cf99158d1ecb2bf02f57c5f05f14683af2da2ff8fcfa97da51d348722eadf54e1d97ee3b5ed443db89242a58776f36539d4266bb7f81b54e2d1fea3e211255b912037861d6607d77e5a683544a5d6f083cc4a428c9c4463bbb0fb095a92ee66685e656fbf4f07ffaf3d260e04a3a3a9744cbbd8f92cb75463b65eba5d9000410fd149cf4cd39d864e83a3f3ff09d192e8955e44da464f694004c399c73b71686a773138b25e444b10df2e7392e93683a76646612ced2b3f7c12afd657627fcfb722483506fb4f577e5ea6c35633ef533fe1c104666129a169dd2a92b7fd0b759d4aa9cdc8b5a4e5109bc24e1c3754ffe34732d06295b861fb4d591264d498ab3e2eecf20dabe7d3d1be5694ad1dc51f433173cc84ba7dcc6bf33f5695cd84551ec3259a41f9f2aa1499c3b5c41df06f22cf4d7579dd74b77c5763d2f190460337d2c152745a83febc6b6dcf2a888b128565532626a1a61481142278224136dab32a074047d3f44767210d276d85ba609ebf010d97bc158a0d819c4fff380453a451ddec1717c3538300e23502beb49f70e7c4df612af66a3f161c742eabbf30bd3193bf5610fea817e76d09e664833b75c09bb4e5be56afa2685f11acffd0dbc71d66c72156ab95442d072e6670bd973b55a80fac90244752dd3bb4471c2aa5a811f210ffe39d92936e5fd8a5fae291f68dc7b4605b1eef5431d44feb69218913f2dcd071d32d0b3fedf7963426615a2268f5ab668357ce8bd38ade0e8e0a38299d02973dbcc73e7b7b59a2fc7fbfdf68ed192f46f7c274a100d23e1cd61418d7335d42ce4673be0168fce656e075137e05a16d2c0bbf8dca441d08ffdb06081c26ce2512e950a91a0d63387968d4d5f86619971ff1419954abb830123cea9c4a1da2c6eaebf9de1c503713c6f2ad4e27cacd85d4326cb62571a4d456381a55cfb87dd245690274b4a75b6119f59c330d0784205b9a84aa5912f0b7acc4caeb89eb205af3edbdf5ecd86663b55099552872f66fe3d8ab1f5ba2d754be66b1bd687524f4d33a1672daf6c12abe18af034af666cc673f5cdd976708170417635d0927b68a02b4963fce72a5673911ecc8ff6a63f9cdad02991defb45ef8a3e6287c7aae0ca6a5ead61d22a6e111ede14a29fa9178f8676e310ba60e11aff7e54d1a12aad1e4fbdcd310635efe7571d5f7601a13cfe886b86f0b6a7b61caff9ba3325af7af0903ef814c10d8ba26c4fa59398fe352ef80a5ccac596408f5fdcde3a91df06b91029b563328517c5e12ac0d5b97832ca46f936625703338a40d05d510f92d41e0582119119330df5ce14aafcb12de9483eb8d8398e72f7da250d04f6d0447cbf44fe1fbdb664a5e4d573569aa9ae8c8070967cb877918659bb9a44da6f65f1d77b72c2e203de7ea13730632a52d54861fd9a45588e77aefc67d596c34eeb5bced55d774c4f470ee8b8752e91da4dcac48595448981d84426709fdb3e666218540693246c6250e2acfb64b217e247a4a9cdafd3da348e6edfd3c93895c2c1b816c8609f19f5b7eb40c9289ebdae1c71b3d03eb3104e4b33a57970ae9fa3cea85931581e84d02f0bf983c49be1c38065e3260c26b64c6fee748210d23e64c27211fb6cf2137f60c5078a5cd36d0b24d475353874c6715667e52622b7340a8ea5163182da4df22668a19291073dac256494d9fe5eb6d3eac30aa62e966c69937f17de494a780fc1f98e68736c8a5769b57bd45e9469793965c8b27f38f774d51d3a400e7841bbe8cdf583907cc08747c334fd46d51afc5023e123dd8c5eb230f99ff125e690ce44894e562b05663c90f114762002087c5bc1db34662dcc44dffc089f65f31110e814993005f1626dcc6056deb889de99d79cc918173b396a3195d84a34dc8246473a4f69c3fee8fb2e872c0b9639168977272db6fef9303917bc9cfd333a9b3ba4bec5c446ffa545e26a82295beafc80151f9638e54c628ca34bd041d36df9e1ba800c5296b271e87c51f887de7cac74617ac485df2e7497b942233303697bfb603dbe038698b9d5478d2d82b87390f5a942179b4dc52ded2716f5d3d21220c45f8c2f5a4bc22e6a9ec277213a13100e5050596b47adfe6a5d22c6a58ac2c6ef90fe46f37254f16fa6a064347670cf44ee730dc6e1e18c535b65c8b60fd8ee4e0946f1f6cdda3d8c9b783858ca5e7402c61fae5b5b21d6aab850361395deb86c213f974e8b00d77bd05f6d9f1c1e6ba29641d03474e061c85fa4dcc9a19a8cbc1879d4f97b428e0fb29292728f8d6bfaf544a225ff874cd356fd5d8983e3885d975fdfa2e590d37e03dc423241bdbc7380cb2f65a08465075e3671164dc74c4d62c11afaeafd2eaa314c188014ada2874f9954d68a2c7432a0921a5827f772635fa143ed249ddd91096c1362e714b7c62f06b62eb2253b887da0be86a03d43c000a2c6dc362e88ae530a3c01f9895f90b2d40f3f2c8a26f0dcafbee4"}}}, @m_simple={0x90, 0xc, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x1b, 0x3, 'trusted.overlay.opaque\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x1, 0x10000000, 0x81, 0xffffffff}}]}, {0x47, 0x6, "d10bb35682a2436e36fc548722c8e5793f60342495a7ff57f2d2eaf116878375ad990ba07b175dd954708cc560b13567a98b93a2239ebb97dde0f99cb286daf4be0952"}}}, @m_ct={0xf8, 0x1f, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x20, 0x4, 0x8, 0x1, 0x5}}, @TCA_CT_PARMS={0x18, 0x1, {0xd3d, 0x5946, 0x10000000, 0x1ff, 0xe6}}]}, {0xb5, 0x6, "923d81ea8a8d5841e655d6f54ea569469c824f5c85f5cbfc2d576b1df200ca1a719dbe58df96dbac2899bb2cf9234b106ff26a1911bf26a6f29d72a342d5369c60c0c3f4ea98ddbae4b34b726663075b67954c945a1579ab01647ca70d423f8a599fb90d38c52c5364fb0cb5c8acc312d936890c65416f37e3bba4e19483d59196b252be8655bfced0c750d76227daaf576eeee8f119dd646b78f21b4dfd3f16ece6a2c8c77d52a6423d88c30e544ab2fc"}}}]}]}}]}, 0x16ac}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008003) 03:40:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r1, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x20, 0x2, [@TCA_TCINDEX_ACT={0x1c, 0x7, [@m_simple={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80, 0x0) connect$bt_sco(r7, &(0x7f0000000180), 0x8) 03:40:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, '\x00', {0x8}, 0xabc1}) r2 = perf_event_open(0x0, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x1}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)="041f46f1ccd4f911b36322ba33b6784eca37db7713b4c243df78e561ba7f0fe66edc925641f00df65d8cb1821b0be5a4e68cf33079550f1b271cebf7d2a32b0197fdc60b280ee5aac1508491ccee32a046a1d40ea06eccb7fbfac957687bd6254f55df7b445b4365976368f491e83dc0222f66a2d8aa0b7aa6e9d045", 0x7c}, {&(0x7f0000000440)="0414ea97a2e02d8c2f4d45051a05d26a9e7fb606600b7a4f61897f6f1a768ed4353762be8bce37fbafd055", 0x2b}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1a060000"], 0x30, 0x1004c811}], 0x1, 0x50) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="2030c1bb6e643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x401) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:44 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:44 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x0, 0x4) r3 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15cd0000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f000000000500000000000000020000000400000006001da0bb4cddbc0000b89a", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000800000000000000000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff000000000000000005000000000000000100000005000000060000000300000001000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffffffffff15000000fcffffff297573657247504c766d6e65743024776e6f64657600000001000000000000000200000000000000040000000000000000000000000000000500000000080000000000000000000001000000000000000000000000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e7423000000000000000000000000000000020000000000000009000000000000000500000000000000000000000000000002000000000000009a050000000000008308000000000000ba090000000000009c0000000000000004000000000000000700000000000000000000000001000028510000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x417) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000002c0)=[0x0, 0x0, r3, r5, r6, r7, r9, r10]) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000380)=""/4096, &(0x7f0000000000)=0x1000) 03:40:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@umask={'umask', 0x3d, 0x3ff}}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000180)={0x8000, [0x9, 0x20, 0xf000, 0xceb, 0x5, 0x7fff, 0xffff, 0x1, 0x319b, 0xb134, 0x7ff, 0x4, 0xfffa, 0x8, 0x0, 0x100, 0xfbff, 0x7ff, 0x5, 0x1, 0x7, 0x3, 0x7, 0x0, 0x4, 0x3, 0x6, 0x7ff, 0xfff, 0x2, 0x2, 0x20, 0x2, 0x4, 0x8000, 0x3, 0x0, 0x7, 0x5040, 0xf6, 0x0, 0x4, 0x8ddd, 0xff, 0x2, 0xff, 0x4, 0xfff], 0x4}) [ 813.151169] overlayfs: invalid redirect (./file0) [ 813.223921] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 813.233584] overlayfs: invalid redirect (./file0) 03:40:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000"], 0x0, 0xb2, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/91, 0x5b}], 0x3, &(0x7f0000000380)=""/140, 0x8c}, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r3 = getegid() getresuid(0x0, &(0x7f0000000800), &(0x7f0000000840)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="18040000daffffff05000000000000000100000000000000020000000000000000010000000000000400000000000000030000002e1e0000050000000000000001000000000000000900000000000000000800000000000000000000000000000e08000000000000000000006a00000001000100d369000071000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000000500000000000000070000000200000073656c696e75780006000000000000000000000000000000855100000000000003000000000000000000000000000000000000000000000081000000000000000600000000000000f7ffffffffffffff0000000000000000050000000000000001000000050000000600000003000000010000800006000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000860200000000000000000000000000007fffffffb147a71815153b3dffffffff15000000fcffffff2975736572474ee9c93db265dd0924776e6f64657600000001000000000000000200000000000000040000000000f8ff00000000000000080000000000000000000001000000000000000000070000000000fffeffffffffffffffffff7f00000000050000000000000002000000040000000600000033000000ffffff7f4e487faad18d057d9f2439466a", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0700000040000000000000000200000000000000000000000000000012000000080000002f6465762f696e7075742f6576656e7423000000000000000600000000000000000000000000000000000000000000000300000000000000400000000000000005000000000000000100000000000000070000000000000003000000000000007f00000000000000ff010000000000000200000001000000000001000014000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000000000000000000000001010000000f5c6000027707070302e2d6c6f32776c616e30000200000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000060000000000000000000000070000001600000006000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="094000000100ffff000000000200000000000000000000000000000012000000050000002f6465762f696e7075742f6576656e74230000000000000000000000020000000000000009000000000000000500000000000000000096830000000002000000000000009a050000000000008308000000000000ba090000000000009c000000000000000400000000000000070000000000000000000000000100002851000000000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000003000000000000000000000000000000120000005cbd00002f6465762f696e7075742f6576656e742300000000000000"], 0x41e) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCAX25NOUID(r5, 0x89e3, &(0x7f0000000080)) chown(&(0x7f0000000000)='./file0\x00', r2, r3) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x922044, &(0x7f0000000040)=ANY=[]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000040)='./file0\x00', 0x16a) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x4000, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}, 0x0, 0x9e}, 0x0, 0x0, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) clone(0x83bac183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d801000000000000005b35b8ac47ac14f5b27384d69a6c06000000afc28ecbef79797f926d4e5f3c174c340d8dec9cacffbad35fe9ade9317c5419233e55239f2adc2e8ba2de25b747ed2a0f1977ad11c78ae6d523b64a76d731c600000000", @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:47 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x5, &(0x7f0000000680)=[{&(0x7f0000000380)="73063d579a42417a6c80c08fd395aa625f5090c00e63b9b7f0a2177a9a552cd1ace416b25f2f2ff02699b67bef462dd0a47e0e0e3a240d31b8a023ec772ab3f77dd7e7fd5dc71c9883e08c4463d683ede26b53f7861d32b092a6d0aec63f8e144b30d58385914b334fe213821a6210d0935a92e8ea7afe60dc355f1c6959e06f8d281ad14aa1ec75575188c5c52785aa824da8b1e3c316f69e4b8d158bf3e67084186f4e809aa5632535002dbd9b84f8e232d372230de22dabe8a2c91bb6f84b9f41de9927e29119122d3c542f5cfe297a0ee1b5568c18", 0xd7, 0x800}, {&(0x7f0000000480)="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", 0xfa, 0x182f}, {&(0x7f0000000580)="5cf00fc2b38355bd483632bed9c916d7ea472904128b4eae9f04e5dec0102934dccf0c66f8593c722386a5a74155efc134e0544387f40e005ac8c054fb78eaf582e6158d815b392d8f1cc4c63ee984b2bdabb08dfd881677a3f596a76e03957c475bd44e3c45f735182ccfe6b88eafbcd47ae8f8f463aa79df58fcb56b3f9ba5c0c9ae029bfe421b9f183e61b0e7d46192dca0a349ea9141c73506b135d9b79778bd443003a73d814cbf608187634e828fb862149e6e0008234ab39663bf82d31a1b1c3a497bea3955ca3b4dd9bb2141099de89dbc7ea4e8c25a59", 0xdb, 0x1}, {&(0x7f00000000c0)="49ea30805ff0b0322dac861825d3080db00b95a501cf84b5d4c075212afa0b23a6e9dd367e37410255", 0x29}, {&(0x7f0000000140)="8e5b4fc90f49a3b9ba4a2d274ab17c4d6d5f054048e93397e618b2333336170a7af409c275f36b6f26e686da7cd1534df3817fdb246aff8343ce36b1cf760d392400152f698f6189885699d6c725c9b5006e", 0x52, 0x1ff}], 0x0, &(0x7f00000002c0)='k\'eyHrA\xe7\x1b\xedx\x89\xf3\x82J\x01\xf5\xe6\x99\x8f\xd5\xc8ing}\x00') 03:40:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x1128802, &(0x7f0000000040)) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40102, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@nodots='nodots'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) clone(0x20200000, &(0x7f0000000140)="025ff56b2551db34acdc429a962bba55073d062abf533d9d9ed0cb6198850143a76761429161fe5fcacc55e709012f7b2583e1dd60d7b42af7e7b9cbf5b19eaf2ab3e001af84ae6107b538f035b7afd752f1e6b7a2440ad30946da30f9cfda2d0e16d99904c6da7f6df75503695c16529d45570a1f986e2d1352d1066cdc5c6f6e0b8491a9cc3a0fdc877b1791a653fa1b4550146cb8c746c7971bfa8b8ec84e26b934730978c9626357", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="c1147608c8bfe57922b64d2458740a8e3e0ae68efc098bfbd6477ea5e6fefb12c5fcb1d2df551f517bb345dcd6c8aed1f836e86053bb0db4d3c831d2a020acedbf25096b231336efa7d33e21bc4c058693bed5e0acdf17c00c12cead97620da17496afb8dd7a19d4811ba4b7f93e8947c8530a0599aea91cd1fa6899e98877f65158e46c767117e266629684653b41fcbf36a3f1f1edf25cfa4f6de4d4ebec46d13c2f8b478f03df5dba1059d1169da72ce06e643bb9e80e6fc7ca3d1bca9df85f3645648741a6e75608a1202be7730b3916621561538876396b68ba5aa9c0fb1b448b08b3eb439b7fed90c3eb6d189c1703") [ 816.098182] overlayfs: invalid redirect (./file0) [ 816.123176] (syz-executor.5,31352,0):ocfs2_parse_options:1484 ERROR: Unrecognized mount option "k'eyHrAçíx‰ó‚Jõæ™ÕÈing}" or missing value 03:40:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 816.211153] (syz-executor.5,31352,0):ocfs2_fill_super:1217 ERROR: status = -22 [ 816.313050] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 816.325642] (syz-executor.5,31372,1):ocfs2_parse_options:1484 ERROR: Unrecognized mount option "k'eyHrAçíx‰ó‚Jõæ™ÕÈing}" or missing value [ 816.346647] (syz-executor.5,31372,0):ocfs2_fill_super:1217 ERROR: status = -22 03:40:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000"], 0x0, 0xb2, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) read(r7, &(0x7f0000000300)=""/90, 0x5a) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x1, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9b090e, 0x8, [], @string=&(0x7f0000000040)=0x1f}}) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f00000001c0)=""/243) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c857765726469683d2e3a66696c6530"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x6}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x80}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="4898c9959429ece8b157a0f06b77df32"}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 03:40:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x3f, 0x92, 0x1}) 03:40:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 819.019889] overlayfs: unrecognized mount option "l…werdih=.:file0" or missing value [ 819.045841] overlayfs: unrecognized mount option "l…werdih=.:file0" or missing value 03:40:50 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1402, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0xc001) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:50 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2006) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)=""/62, 0x3e) 03:40:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 819.201509] overlayfs: missing 'lowerdir' [ 819.207941] overlayfs: invalid redirect (./file0) [ 819.211900] overlayfs: missing 'lowerdir' 03:40:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010804, 0x3a, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6673646e6f7374616c655f726f2c00a6aa3b0789d2f9f1d5858de70f2fe364702e58c1113c6d04e3524a846e7b9d85ede042f5d81875f8b8cd283b83c4ebefc2b3633b52cb39ae6e710d7b33d09b4d"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="900a93d5ad50542508120bba83050c35e336a05d78f645d83cf170c5f38089c43804fddb5d4dc97fefcca6645ffee3ecf848fcfa17b012f650c2af7303e394151e82314c9a5be395ea26938bb410c227a6d909ad615c", 0x56) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000000240)="32caaf42e9d76e7eef33e36fd1514be5188709c9971127757a385ce293f092b2398d62f49d3c928abbfe37d029103d5c669014fc22790ebe5dc5417c51856693433fe7512f08bcf92ce1cc", 0x4b, r3}, 0x68) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0x6, 0x6}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2d2a03, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 03:40:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e66733d54edf26e6f737461ef9e1075b69e"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 822.038995] overlayfs: invalid redirect (./file0) 03:40:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2000) [ 822.108773] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/105) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:53 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x20, 0x40000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x35323645, 0x2, @discrete={0x35f8, 0x7}}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c6c6f7598f64799cf5b2ea53e6b09c3007264615d72723d080066696c0530"]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x1, @random="db3d16018039", 'virt_wifi0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'batadv0\x00'}}, 0x1e) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0xffffffffffff0000, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x8800, 0x0, 'sh\x00'}, 0x2c) pipe(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') accept4$inet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=0x10, 0x800) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="16df05d2b77c50b17d8f1529000000000000000756cdd514", @ANYRES16=r2], 0x2}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/dlm-control\x00', 0x270e42, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4c844}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r5, 0x1000000) sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000440)="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") syz_open_procfs(0x0, 0x0) 03:40:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000040)=0x81, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x200, 0x0) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000010) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x10c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_NAT_DST={0xd4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @remote}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20002000}, 0x20000050) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r3}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x80, 0x501400) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000300)) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) umount2(&(0x7f0000000000)='./file1\x00', 0x0) [ 825.064847] overlayfs: unrecognized mount option "lou˜öG™Ï[.¥>k Ã" or missing value 03:40:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 825.134141] overlayfs: unrecognized mount option "lou˜öG™Ï[.¥>k Ã" or missing value 03:40:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80202, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) mount$overlay(0x400000, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x389624d, &(0x7f0000000000)=ANY=[@ANYRES64=r3]) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:40:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "1d21128cb1cfb14a", "b13198125a04112c02b51d496887f18e23b2acf10daaffc29eaedc10ff46f7b8", '}tZF', "0b4adefa2a194a0f"}, 0x38) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:56 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000000)=0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 825.383809] overlayfs: invalid redirect (./file0) [ 825.393147] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000140)=0x806, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001380)='/dev/kvm\x00', 0x1c001, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) io_submit(0x0, 0x3, &(0x7f0000001340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000000180)="dfff1bc7407f7ab840bccd725878d88221bfb55ac8f65a5bdb5b3cb5ecb3c1ea7f9b8f16f27dfeb887d972fddb20b1418774b753453ccb2f5db11f6dc681a007cf85b175680b95ce22ca55be8af384c4bfe7ce6d471147fd92bf1de33c751da6f3ba9b2ebb36b81b30703c9b31d49b1c7db80cad9959939d4464cb67140c51eb21601120952dd8bed6cd45", 0x8b, 0x1, 0x0, 0x1, r7}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x4, r8, &(0x7f0000000280)="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", 0x1000, 0x6, 0x0, 0x1, r1}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x101, r9, &(0x7f00000012c0)="de9f4bcf", 0x4, 0x4, 0x0, 0x2, r1}]) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x11) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) pipe2(&(0x7f0000000000), 0x84000) open(&(0x7f0000000300)='./file0/file0\x00', 0x101000, 0x0) 03:40:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:40:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40c43b0}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000000000000fddbdf2501000000060006004e23000008000700040000"], 0x3}}, 0x8000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18030000", @ANYRES16=r2, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x20008804}, 0x4) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 03:40:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, 0xb, 0x6, 0x707, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, ']\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb30}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xadd}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10001}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x8890) 03:40:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x81) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 828.162168] overlayfs: invalid redirect (./file0) [ 828.170692] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 828.185586] overlayfs: invalid redirect (./file0) 03:40:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:40:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x11}], 0x400, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x138, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xd}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4a}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000e3ffffffffffffff00", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250f00000008004a0006ac0f0008004a00cd5de9950800a50001000000060096007f0000000800a50000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) statfs(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/229) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000300)) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x1a}) 03:40:59 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 828.321833] overlayfs: invalid redirect (./file0) [ 828.338749] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:40:59 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x10000000000153b, 0x4, &(0x7f0000001580)=[{&(0x7f0000000380)="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", 0x1000, 0x7}, {&(0x7f0000001380)="798aa6df0c9ed291f2b2717a4170082fe50ae1a95d76d78693177d80e64070f29926855272ea72f027733692317089eed872956deb88b7d094b1d20d83602f5eb56a6b9f0a09dc92e37c4e1298490df4426db624a0e605cce21e7e8deab9bc592dea9a800994b22844c78ffba95557d30239c814f93fe6766164a63a99fb69b2eb78002879dc86b0092965199bf325aeaca5", 0x92, 0x8}, {&(0x7f0000001440)="aad13cf5b2d4ced6b40256095d58e3f970fa953eca79752595807ca512fb67b798c51eab0ff8f4e4f80547e31c048c51ce7f9c0a0b71b124b77022cb30c31c2a2cd0f2f30cc66d92b44abed3cfecb6302780a28b0ea3813101ffcf5bfadc1744786b65f52fcf33707d66ab2d2fcff636c5a13bb473272ef99f0597fb903b5c9387bfeb0397ec3198d7df618a1f52f15a4928f7142b4174ea08973ac717f47a497d67576388fbf29aea", 0xa9, 0xffffffffffffdd22}, {&(0x7f0000000140)="1f4eda2f5d29395e656d48e43302d69186219686d37573824f3e6d0421f1a837ebd3fa33eedb746cd2081656758a307b1f86156483c8374bbed233e93baac427c372c3d8929ad4a9c53a3b47a38c0c6fad95052efb7a2b643acf3105cc8c6dffcb924826f1ba7b7e5a06d49de46ef343618b2f0f47e8c23b48", 0x79, 0x5}], 0x2000000, &(0x7f00000000c0)='overlay\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) [ 828.410844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 828.593597] ceph: device name is missing path (no : separator in /dev/loop5) [ 828.657425] overlayfs: invalid redirect (./file0) [ 828.691621] ceph: device name is missing path (no : separator in /dev/loop5) [ 828.730407] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 828.777045] audit: type=1400 audit(2000000460.040:130): avc: denied { sys_ptrace } for pid=31539 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 03:41:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c9"], 0x0, 0xdf, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:41:02 executing program 1: umount2(&(0x7f0000000000)='./file1\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e0000000500000009000000ff0f000003000000040000009905000400000000db07000003000000000800000080000008000000ff0300001dbc0000fdffff7f06000000040000000200000000000000800000000500000007000000"]}) 03:41:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="8abaf4041cb4f7f5c33a72a8a631c976488ec21f3de68574c981a443e716facede8d404ce5f1917e5663893924acaa1128f4f18a62aca355d6dc5545ba2393399752a698aad9f57ce0009e206530c85b16bd099079b32ef21052dc15829a0777c28fae7f9b804d25207dbee6aea47e82bc0a927eb65590cddb81e56d1b61963db4b079ac41d13fb73c490b0be91d0f7275a86788fff26ab641a6bc044e6517af315ecfc36c312d9b2540cd66bde1687e116ea14c10bb6758148baec62b006bb4541f174c4d1558", 0xc7) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000040)=0x1) 03:41:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:41:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 831.186961] overlayfs: missing 'lowerdir' 03:41:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf010000000000"], 0x0, 0xd0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 831.223745] overlayfs: missing 'lowerdir' 03:41:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000005400)='/dev/snd/pcmC#D#c\x00', 0xec000000, 0x204440) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',loWerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:41:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:02 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000051402080000000000000025080001000200000008000300090000000800010002000000080003000100000008000100020000000800030004000000080001000000000008000300020000000800010001000000080003000400000008000100020000000800030000000000080001000100000008000300010000003da60bd70bd574165fc73e3a76dc73533ccb57ce512074886d389888f080f2fe4b"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x24040854) statx(r1, &(0x7f0000000080)='./file0/file0\x00', 0x2000, 0x65f, &(0x7f0000000380)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgget$private(0x0, 0x80) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0) 03:41:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x7fffffff, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6366732e666151000204010a0200027400f801", 0x17}], 0x1, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) socket$tipc(0x1e, 0x1fa3c09d311710e3, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000001c0)={0x2, 0x0, 0xb, 0x1d, 0x101e9, &(0x7f00000003c0)="5d8d0ae2e4b17abec60461d58b63e8c618e6b8a6b4fbb16e221bfc196f828aa1742e50f5ed5af24c97eb39f5b3e6d87d44658957b3b02566b9bbabaf3dd867a1e7e1039ca6f68297b1463cc7a6e4fb49d8168729574ba1598f69dad5ad9eb79b9c453083a8ca17b11048910517b30ace359908672d4d0413839977d2d62af4d967c2f9acf42877aaa7e2b071f8e3178c5ff82fb171b68f5752aa13155b5ccf42f4b66c7d95c8be9d840a34e4f442abb77c000e7e3c9b47c0137e0100102c6e11d16f5ac8a1d6b656858914b79beb835007b37658e8a68bba6f7771afc5b0ea7fa98e39876fcf5b2f13b0a1e155cc89d13e27c0bae318da9663b30972defa44f4ff718a1b988ec6c7fdc6ea1533d340694c068844a2476d17faad0c133f4737b666b69f7d6b9ebc6d3e14bc4eaec88d35834a78fbdda76b7251c7708f6827be06678e3d0780b9d5d38255aef789d2ade40a231b69edfb6ee98f5a868a643971285986c1b880f7815a196c889870c75954c30375328db1af02bdb25a0ea486ea16c429d044e3bbc910ac1187be97c29e9992ae25edaac9032a0cc1f2fca457d66a11ae531f7f2deda66236843ae247b5c1b28fe0136d5cd919b02a8e8013efb73c117bd1681e1de4305f85c6ca549ae71ded99d3a5b20c8e9ea47ad95b5b8bac0592a5e78966bbed1f24a2c5d4eade5980bb7c0c4c668b4f545a46f6d122fb3f00acae424d69edd27f9a9aab03a2b5888217b4f69ecf7e871a8bd2010b6a2c792a2103063515810b415b57622ab583011e90b35b2988108890c7e4b3a062bb0581faff185b151486f7e702daa0f4cbdf2da6cf74faef8e5405749ab453b7f7740a711405ff1a68b934eef12f12ee4dff890e112c76b43266a4751586f71bfb68cd8214f962e1a5c223edf7a80df47d032f7c4e8183f5082283cb58c1c496ff63867b954acce32c61b571488998e1a0a0ae8099d8ab6a20877c0f3d0b31d999e35207e31289de840ee9614130a5331dbeedd619e2feb6233167c9d7589cf449734ee0e646c8ce2ab6368054ebd23f73170bfec1565940f61240c938b72130ba204d3728faa2142428d35f8e2bea14cdb3548eba2d7fe8b0aee6fe9b9bbb2f10c659f2727c987486d50da4a08a9cf7ed7d80de985ceedba03c7ab9cd0728dba003aaacca3acbf8e4409c4169c6086deb8d43a8bab9fc74f0abeaabf174b99a39bfdf9e30ea0c89b55551cb5fb0e827f760c010fa59a8468880b4e2fb046f5a25046640ad8e971571a0a5b8326434c0a931ec18fb10d60af8f2500e5e871035b3846bbdb955013dcbdca4d97a4f4b9744e36ea996ff38c75216f00ff8d3eed152c8f934425158a3ec7ba0e998d67cf832eda7557d159f3a8d87cb9bbc01d52c1e348216a65ec6ba7f33dd795095ef5f93e205fc06d4f092d154c3f77251902915dd29"}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) ioctl$void(0xffffffffffffffff, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0xc08e, 0xffffffffffffffff, &(0x7f0000000240)='4', 0x1, 0x5, 0x0, 0x3, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="77e59899a17d72532c0575c606cbfd453cfdcd92d97d3e", 0x17, 0x9, 0x0, 0x1, r5}]) [ 831.386774] overlayfs: invalid redirect (./file0) [ 831.449315] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. 03:41:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180046ec000000ec00000007fd4eb3e097000000000000000a450005000000003a0c000000000000000000000000000000000000000300120000000000000000000000000000000000ed0000000000000000000000000000000000000000f3000000000000008ece0000000000000200000000000000000000000000000000000000a9ad22afeba1e45c00448a161a00000030000000000000000000000000000600000400000022000000000000000000000000f7af654c79185b92846abf2b1dd96a4361cf0100000000003716b7ca335cffe2d6448b38caf1c9"], 0x0, 0xdf, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:41:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666151000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) umount2(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3175", 0xff7c}], 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000140)={0x8, 0x19, &(0x7f00000003c0)}) 03:41:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:05 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000001380)="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") mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040840}, 0x11) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000735c5d386a3a44439e2221dfaa4", @ANYRES32=r6, @ANYBLOB="0000000000fffffe00000000090001006866736300eaff100800020000000000"], 0x3}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="d00000002c00270d00"/20, @ANYRES32=r6, @ANYBLOB="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"], 0xd0}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0x4}) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x1) [ 834.243633] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.267218] audit: type=1400 audit(2000000465.530:131): avc: denied { ioctl } for pid=31622 comm="syz-executor.3" path="socket:[114066]" dev="sockfs" ino=114066 ioctlcmd=0xae46 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 834.274968] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.5'. [ 834.278813] overlayfs: invalid redirect (./file0) [ 834.295887] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.349725] ================================================================== [ 834.349765] BUG: KASAN: slab-out-of-bounds in fbcon_get_font+0x508/0x530 [ 834.349773] Read of size 1 at addr ffff88805a765950 by task syz-executor.1/31632 [ 834.349776] [ 834.349786] CPU: 1 PID: 31632 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 834.349791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.349795] Call Trace: [ 834.349809] dump_stack+0x13e/0x194 [ 834.349821] ? fbcon_get_font+0x508/0x530 [ 834.349834] print_address_description.cold+0x7c/0x1e2 [ 834.349845] ? fbcon_get_font+0x508/0x530 [ 834.349855] kasan_report.cold+0xa9/0x2ae [ 834.349866] fbcon_get_font+0x508/0x530 [ 834.349877] ? display_to_var+0x7b0/0x7b0 [ 834.349887] con_font_op+0x1c6/0xf70 [ 834.349900] ? con_write+0xc0/0xc0 [ 834.349917] ? __might_fault+0x177/0x1b0 [ 834.349929] vt_ioctl+0x174b/0x1f00 [ 834.349939] ? complete_change_console+0x350/0x350 [ 834.349949] ? avc_ss_reset+0x100/0x100 [ 834.349958] ? __lock_acquire+0x5f7/0x4620 [ 834.349971] ? __lock_acquire+0x5f7/0x4620 [ 834.349980] ? tty_jobctrl_ioctl+0x3b/0xbf0 [ 834.349988] ? complete_change_console+0x350/0x350 [ 834.349999] tty_ioctl+0x6c5/0x1220 [ 834.350016] ? tty_vhangup+0x30/0x30 [ 834.350027] ? trace_hardirqs_on+0x10/0x10 [ 834.350045] ? tty_vhangup+0x30/0x30 [ 834.350057] do_vfs_ioctl+0x75a/0xfe0 [ 834.350066] ? selinux_file_mprotect+0x5c0/0x5c0 [ 834.350076] ? ioctl_preallocate+0x1a0/0x1a0 [ 834.350094] ? security_file_ioctl+0x76/0xb0 [ 834.350103] ? security_file_ioctl+0x83/0xb0 [ 834.350114] SyS_ioctl+0x7f/0xb0 [ 834.350122] ? do_vfs_ioctl+0xfe0/0xfe0 [ 834.350134] do_syscall_64+0x1d5/0x640 [ 834.350147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 834.350155] RIP: 0033:0x45c849 [ 834.350160] RSP: 002b:00007fde73d6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.350170] RAX: ffffffffffffffda RBX: 00007fde73d6f6d4 RCX: 000000000045c849 [ 834.350175] RDX: 0000000020000140 RSI: 0000000000004b6b RDI: 0000000000000003 [ 834.350180] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 834.350186] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 834.350192] R13: 0000000000000328 R14: 00000000004c58d0 R15: 000000000076bfac [ 834.350207] [ 834.350211] Allocated by task 27123: [ 834.350219] save_stack+0x32/0xa0 [ 834.350227] kasan_kmalloc+0xbf/0xe0 [ 834.350233] __kmalloc+0x15b/0x7c0 [ 834.350241] fbcon_set_font+0x2f8/0x7c0 [ 834.350249] con_font_op+0xb73/0xf70 [ 834.350254] vt_ioctl+0x1334/0x1f00 [ 834.350262] tty_ioctl+0x6c5/0x1220 [ 834.350269] do_vfs_ioctl+0x75a/0xfe0 [ 834.350276] SyS_ioctl+0x7f/0xb0 [ 834.350284] do_syscall_64+0x1d5/0x640 [ 834.350292] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 834.350294] [ 834.350298] Freed by task 0: [ 834.350301] (stack is not available) [ 834.350304] [ 834.350310] The buggy address belongs to the object at ffff88805a762340 [ 834.350310] which belongs to the cache kmalloc-16384 of size 16384 [ 834.350317] The buggy address is located 13840 bytes inside of [ 834.350317] 16384-byte region [ffff88805a762340, ffff88805a766340) [ 834.350320] The buggy address belongs to the page: [ 834.350328] page:ffffea000169d800 count:1 mapcount:0 mapping:ffff88805a762340 index:0x0 compound_mapcount: 0 [ 834.350337] flags: 0xfffe0000008100(slab|head) [ 834.350348] raw: 00fffe0000008100 ffff88805a762340 0000000000000000 0000000100000001 [ 834.350356] raw: ffffea0001514c20 ffffea000160ca20 ffff88812fe55200 0000000000000000 [ 834.350359] page dumped because: kasan: bad access detected [ 834.350360] [ 834.350362] Memory state around the buggy address: [ 834.350368] ffff88805a765800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 834.350372] ffff88805a765880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 834.350377] >ffff88805a765900: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 834.350380] ^ [ 834.350384] ffff88805a765980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 834.350389] ffff88805a765a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 834.350391] ================================================================== [ 834.350394] Disabling lock debugging due to kernel taint [ 834.350558] Kernel panic - not syncing: panic_on_warn set ... [ 834.350558] [ 834.350565] CPU: 1 PID: 31632 Comm: syz-executor.1 Tainted: G B 4.14.173-syzkaller #0 [ 834.350569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.350571] Call Trace: [ 834.350579] dump_stack+0x13e/0x194 [ 834.350586] panic+0x1f9/0x42d [ 834.350591] ? add_taint.cold+0x16/0x16 [ 834.350600] ? fbcon_get_font+0x508/0x530 [ 834.350605] kasan_end_report+0x43/0x49 [ 834.350611] kasan_report.cold+0x12f/0x2ae [ 834.350626] fbcon_get_font+0x508/0x530 [ 834.350633] ? display_to_var+0x7b0/0x7b0 [ 834.350640] con_font_op+0x1c6/0xf70 [ 834.350647] ? con_write+0xc0/0xc0 [ 834.350658] ? __might_fault+0x177/0x1b0 [ 834.350665] vt_ioctl+0x174b/0x1f00 [ 834.350672] ? complete_change_console+0x350/0x350 [ 834.350678] ? avc_ss_reset+0x100/0x100 [ 834.350685] ? __lock_acquire+0x5f7/0x4620 [ 834.350694] ? __lock_acquire+0x5f7/0x4620 [ 834.350701] ? tty_jobctrl_ioctl+0x3b/0xbf0 [ 834.350707] ? complete_change_console+0x350/0x350 [ 834.350713] tty_ioctl+0x6c5/0x1220 [ 834.350719] ? tty_vhangup+0x30/0x30 [ 834.350726] ? trace_hardirqs_on+0x10/0x10 [ 834.350735] ? tty_vhangup+0x30/0x30 [ 834.350741] do_vfs_ioctl+0x75a/0xfe0 [ 834.350748] ? selinux_file_mprotect+0x5c0/0x5c0 [ 834.350754] ? ioctl_preallocate+0x1a0/0x1a0 [ 834.350763] ? security_file_ioctl+0x76/0xb0 [ 834.350769] ? security_file_ioctl+0x83/0xb0 [ 834.350775] SyS_ioctl+0x7f/0xb0 [ 834.350781] ? do_vfs_ioctl+0xfe0/0xfe0 [ 834.350787] do_syscall_64+0x1d5/0x640 [ 834.350795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 834.350799] RIP: 0033:0x45c849 [ 834.350802] RSP: 002b:00007fde73d6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.350808] RAX: ffffffffffffffda RBX: 00007fde73d6f6d4 RCX: 000000000045c849 [ 834.350811] RDX: 0000000020000140 RSI: 0000000000004b6b RDI: 0000000000000003 [ 834.350814] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 834.350817] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 834.350821] R13: 0000000000000328 R14: 00000000004c58d0 R15: 000000000076bfac [ 834.352268] Kernel Offset: disabled [ 834.966157] Rebooting in 86400 seconds..