# https://syzkaller.appspot.com/bug?id=f1968ba2078fd121a681c4a26180bac8dbde843e # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"sysctl":true,"tmpdir":true,"segv":true} r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, '\"&)]#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-{,:)+)'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_user={'subj_user', 0x3d, '\''}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}, 0x1, 0x0, &(0x7f0000000200)="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") (async) r2 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, '\"&)]#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-{,:)+)'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_user={'subj_user', 0x3d, '\''}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}, 0x1, 0x0, &(0x7f0000000200)="3be6016df45d46d848f62d71b0ecbad1b42d831f6ec443955722113b603a084680f65bcdb424ca4ff9532eb89e7d2c4a918a6ac3ef74dcbf7a199ff62c34e2f9952f1fe94de019dc07a833be49ac9f302b826ceaa254dd1e22b6b56d74c1c69f76088aaad8b7de0b45d172901b4c0949c7b42edb0d118f5269b7c7a91e4df0656a6edee8db846a57aeb60a63a44f9751d6e803bcbef62487ebac119563a9c3089cf112b4eabc94cc4cf99d0d557b9c50a8f6f2075fb822e2e40d67c176ba4bdc05bc0b07f959a07edfd8681962f7682262d7399bfb4c1cb95b09564c40284ce7c22158b0250fc3c3bc81ae6a51f02ad55d6c2364776ff57d4d6d8437") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='-{,:)+)', 0x900, 0x21) write$P9_RREADLINK(r3, &(0x7f0000000340)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) write$P9_RREADLINK(r3, &(0x7f0000000340)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0xfb, 0xe1, 0x5, 0x53, "d10fa4412f3eb409883cd05d68cd377d", "e2d9514310f3dd49fd8b76a0a8fb5418ee21bd8f4bb77538f806055ad7afb3bc59ac8e7bdd5c02a1f578e7db99382997979e84a0c2ec9fd22d6285032f612e5b931612191406a1e4d6173a839727ff8b029e8d39fd3d1c65aca7b3c8468b5f29d7fa1d5bb7a26901a5a0071335923f390b372d0858af356a082e13129d8dfbd2e6031f49264c57d7e5eb544f07a95c289f3a7e6d85375cb338243e0215a21322e4069d5200cb3b9505f8f84707680cda9096044e37a391f357ca9c2e528eab3e4f28c8c8a924b98299dc6f69"}, 0xe1, 0x1) (async) setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0xfb, 0xe1, 0x5, 0x53, "d10fa4412f3eb409883cd05d68cd377d", "e2d9514310f3dd49fd8b76a0a8fb5418ee21bd8f4bb77538f806055ad7afb3bc59ac8e7bdd5c02a1f578e7db99382997979e84a0c2ec9fd22d6285032f612e5b931612191406a1e4d6173a839727ff8b029e8d39fd3d1c65aca7b3c8468b5f29d7fa1d5bb7a26901a5a0071335923f390b372d0858af356a082e13129d8dfbd2e6031f49264c57d7e5eb544f07a95c289f3a7e6d85375cb338243e0215a21322e4069d5200cb3b9505f8f84707680cda9096044e37a391f357ca9c2e528eab3e4f28c8c8a924b98299dc6f69"}, 0xe1, 0x1) recvfrom(r3, &(0x7f00000005c0)=""/174, 0xae, 0x0, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x6, @private0, 0x74e2, 0x3}, 0x80) (async) recvfrom(r3, &(0x7f00000005c0)=""/174, 0xae, 0x0, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x6, @private0, 0x74e2, 0x3}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r2, &(0x7f0000000740)=@random={'os2.', '[\x00'}) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000780)=0xe) recvfrom$inet(r3, &(0x7f00000007c0)=""/54, 0x36, 0x10003, &(0x7f0000000800)={0x2, 0x4e20, @local}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='\'', 0x80081, 0x6) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='\'', 0x80081, 0x6) listen(r7, 0xfffff800) sendto$inet_nvme_pdu(r0, &(0x7f0000000880)=@rsp={{0x5, 0x2, 0x18, 0x90, 0x2}, {@u16=0x1, 0x0, 0x8, 0x9, 0x3}}, 0x80, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000d00)={r9, 0x1, 0x1, [0x3, 0x1fe, 0x8, 0x7, 0x8000000000000001], [0x0, 0xda, 0x4, 0x4, 0x1, 0x0, 0x449e621c, 0xf, 0x73, 0xa, 0xd8c, 0x6, 0x7fff000000000, 0x1, 0x6, 0x3, 0x6, 0x3, 0x0, 0xbd, 0xfe5, 0xa, 0x52, 0x7, 0x5, 0x2, 0x5, 0x65, 0x1, 0x2, 0x6, 0xffc0000000000000, 0x89, 0xf984, 0xe462, 0x78e, 0x7, 0x6, 0xf, 0x1, 0x1, 0x9, 0x7ff, 0x8, 0x0, 0x3, 0x2, 0x4, 0x17bbe00000000000, 0x9, 0xc, 0x0, 0xe06, 0xff, 0xfff, 0x7, 0x7d5110bf, 0x2, 0xf52, 0x7, 0x9, 0x1f7a5757, 0x3, 0x0, 0x3, 0x1000, 0x1400000000000, 0x200, 0x7, 0x8, 0x401, 0x8000, 0x7f, 0x2, 0x1, 0x7, 0x10, 0x7, 0x7, 0x6, 0x5, 0x0, 0xfff, 0x81, 0x5, 0x9, 0x10000, 0xd, 0x5, 0xffffffffffff8001, 0x10001, 0x0, 0x0, 0x8, 0x4, 0xff, 0xc, 0x7, 0x3, 0x0, 0x3a, 0x3, 0x8, 0x0, 0x1273, 0xfeb, 0x7fffffffffffffff, 0x1, 0x3, 0xfffffffffffffffa, 0x3795, 0x3, 0xc, 0x3, 0x3, 0x2, 0x7, 0x5, 0x2, 0x80, 0x1]}) accept4$unix(r6, &(0x7f0000001140)=@abs, &(0x7f00000011c0)=0x6e, 0x0) fsetxattr$security_smack_transmute(r8, &(0x7f0000001200), &(0x7f0000001240), 0x4, 0x1) fchown(r0, r4, r5) (async) fchown(r0, r4, r5) ioctl$TCXONC(r8, 0x540a, 0x1) setresuid(r1, r4, r4) msgget(0x2, 0x2) (async) r10 = msgget(0x2, 0x2) r11 = gettid() timer_create(0x0, &(0x7f0000001280)={0x0, 0x3c, 0x0, @tid=r11}, &(0x7f00000012c0)) (async) timer_create(0x0, &(0x7f0000001280)={0x0, 0x3c, 0x0, @tid=r11}, &(0x7f00000012c0)) msgctl$IPC_INFO(r10, 0x3, &(0x7f0000001300)=""/101) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) accept4$inet(r8, &(0x7f0000001380)={0x2, 0x0, @dev}, &(0x7f00000013c0)=0x10, 0x80800) read$FUSE(r3, &(0x7f0000001400)={0x2020}, 0x2020) fstat(r2, &(0x7f0000003440))