executing program
BUG: memory leak
unreferenced object 0xffff88810aa67500 (size 256):
  comm "syz-executor660", pid 5071, jiffies 4294946261 (age 19.490s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    60 81 a2 09 81 88 ff ff c0 90 8e 0e 81 88 ff ff  `...............
  backtrace:
    [<ffffffff8160ae8f>] kmem_cache_zalloc include/linux/slab.h:710 [inline]
    [<ffffffff8160ae8f>] __alloc_file+0x1f/0xf0 fs/file_table.c:138
    [<ffffffff8160ba99>] alloc_empty_file_noaccount+0x19/0x50 fs/file_table.c:209
    [<ffffffff8161f4d6>] vfs_tmpfile_open+0x26/0x90 fs/namei.c:3645
    [<ffffffff81c2c883>] ovl_do_tmpfile fs/overlayfs/overlayfs.h:331 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_tmpfile fs/overlayfs/copy_up.c:785 [inline]
    [<ffffffff81c2c883>] ovl_do_copy_up fs/overlayfs/copy_up.c:877 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_one+0xeb3/0x1710 fs/overlayfs/copy_up.c:1045
    [<ffffffff81c2d1e7>] ovl_copy_up_flags+0x107/0x170 fs/overlayfs/copy_up.c:1091
    [<ffffffff81c2d350>] ovl_maybe_copy_up+0x100/0x130 fs/overlayfs/copy_up.c:1123
    [<ffffffff81c22552>] ovl_open+0x52/0x100 fs/overlayfs/file.c:153
    [<ffffffff815ff3cf>] do_dentry_open+0x2ff/0x7c0 fs/open.c:882
    [<ffffffff816257ab>] do_open fs/namei.c:3557 [inline]
    [<ffffffff816257ab>] path_openat+0x161b/0x1c10 fs/namei.c:3714
    [<ffffffff81628641>] do_filp_open+0xc1/0x1b0 fs/namei.c:3741
    [<ffffffff81602d5d>] do_sys_openat2+0xed/0x260 fs/open.c:1310
    [<ffffffff816035ed>] do_sys_open fs/open.c:1326 [inline]
    [<ffffffff816035ed>] __do_sys_open fs/open.c:1334 [inline]
    [<ffffffff816035ed>] __se_sys_open fs/open.c:1330 [inline]
    [<ffffffff816035ed>] __x64_sys_open+0x7d/0xe0 fs/open.c:1330
    [<ffffffff848ec595>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848ec595>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff88810e680680 (size 32):
  comm "syz-executor660", pid 5071, jiffies 4294946261 (age 19.490s)
  hex dump (first 32 bytes):
    ff 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    a8 f1 e1 00 81 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<ffffffff8222cafa>] kmem_cache_zalloc include/linux/slab.h:710 [inline]
    [<ffffffff8222cafa>] lsm_file_alloc security/security.c:603 [inline]
    [<ffffffff8222cafa>] security_file_alloc+0x2a/0xb0 security/security.c:1599
    [<ffffffff8160aecd>] __alloc_file+0x5d/0xf0 fs/file_table.c:143
    [<ffffffff8160ba99>] alloc_empty_file_noaccount+0x19/0x50 fs/file_table.c:209
    [<ffffffff8161f4d6>] vfs_tmpfile_open+0x26/0x90 fs/namei.c:3645
    [<ffffffff81c2c883>] ovl_do_tmpfile fs/overlayfs/overlayfs.h:331 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_tmpfile fs/overlayfs/copy_up.c:785 [inline]
    [<ffffffff81c2c883>] ovl_do_copy_up fs/overlayfs/copy_up.c:877 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_one+0xeb3/0x1710 fs/overlayfs/copy_up.c:1045
    [<ffffffff81c2d1e7>] ovl_copy_up_flags+0x107/0x170 fs/overlayfs/copy_up.c:1091
    [<ffffffff81c2d350>] ovl_maybe_copy_up+0x100/0x130 fs/overlayfs/copy_up.c:1123
    [<ffffffff81c22552>] ovl_open+0x52/0x100 fs/overlayfs/file.c:153
    [<ffffffff815ff3cf>] do_dentry_open+0x2ff/0x7c0 fs/open.c:882
    [<ffffffff816257ab>] do_open fs/namei.c:3557 [inline]
    [<ffffffff816257ab>] path_openat+0x161b/0x1c10 fs/namei.c:3714
    [<ffffffff81628641>] do_filp_open+0xc1/0x1b0 fs/namei.c:3741
    [<ffffffff81602d5d>] do_sys_openat2+0xed/0x260 fs/open.c:1310
    [<ffffffff816035ed>] do_sys_open fs/open.c:1326 [inline]
    [<ffffffff816035ed>] __do_sys_open fs/open.c:1334 [inline]
    [<ffffffff816035ed>] __se_sys_open fs/open.c:1330 [inline]
    [<ffffffff816035ed>] __x64_sys_open+0x7d/0xe0 fs/open.c:1330
    [<ffffffff848ec595>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848ec595>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

BUG: memory leak
unreferenced object 0xffff888109b2f700 (size 256):
  comm "syz-executor660", pid 5080, jiffies 4294947425 (age 7.850s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    60 81 a2 09 81 88 ff ff 00 1c 8b 0e 81 88 ff ff  `...............
  backtrace:
    [<ffffffff8160ae8f>] kmem_cache_zalloc include/linux/slab.h:710 [inline]
    [<ffffffff8160ae8f>] __alloc_file+0x1f/0xf0 fs/file_table.c:138
    [<ffffffff8160ba99>] alloc_empty_file_noaccount+0x19/0x50 fs/file_table.c:209
    [<ffffffff8161f4d6>] vfs_tmpfile_open+0x26/0x90 fs/namei.c:3645
    [<ffffffff81c2c883>] ovl_do_tmpfile fs/overlayfs/overlayfs.h:331 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_tmpfile fs/overlayfs/copy_up.c:785 [inline]
    [<ffffffff81c2c883>] ovl_do_copy_up fs/overlayfs/copy_up.c:877 [inline]
    [<ffffffff81c2c883>] ovl_copy_up_one+0xeb3/0x1710 fs/overlayfs/copy_up.c:1045
    [<ffffffff81c2d1e7>] ovl_copy_up_flags+0x107/0x170 fs/overlayfs/copy_up.c:1091
    [<ffffffff81c2d350>] ovl_maybe_copy_up+0x100/0x130 fs/overlayfs/copy_up.c:1123
    [<ffffffff81c22552>] ovl_open+0x52/0x100 fs/overlayfs/file.c:153
    [<ffffffff815ff3cf>] do_dentry_open+0x2ff/0x7c0 fs/open.c:882
    [<ffffffff816257ab>] do_open fs/namei.c:3557 [inline]
    [<ffffffff816257ab>] path_openat+0x161b/0x1c10 fs/namei.c:3714
    [<ffffffff81628641>] do_filp_open+0xc1/0x1b0 fs/namei.c:3741
    [<ffffffff81602d5d>] do_sys_openat2+0xed/0x260 fs/open.c:1310
    [<ffffffff816035ed>] do_sys_open fs/open.c:1326 [inline]
    [<ffffffff816035ed>] __do_sys_open fs/open.c:1334 [inline]
    [<ffffffff816035ed>] __se_sys_open fs/open.c:1330 [inline]
    [<ffffffff816035ed>] __x64_sys_open+0x7d/0xe0 fs/open.c:1330
    [<ffffffff848ec595>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]
    [<ffffffff848ec595>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
    [<ffffffff84a00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd