# https://syzkaller.appspot.com/bug?id=0565a5f7aa66c25f25820bc42361190a4f8b6173
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":6,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true}
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180), 0x0) (async)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
dup(r4) (async)
r5 = dup(r4)
r6 = syz_open_dev$vcsa(0x0, 0x5e1a, 0x160c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000f908da6000000000000000085fe00006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)
open(&(0x7f00000008c0)='./file0\x00', 0x40040, 0x102)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}})
write$FUSE_BMAP(r5, 0x0, 0x0) (async)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/1401], 0x578)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB])
clock_gettime(0x0, &(0x7f0000000540))
ppoll(&(0x7f0000000500)=[{r5, 0x402}], 0x1, 0x0, &(0x7f00000005c0)={[0x4]}, 0x8)
chdir(0x0)
mount$bind(&(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0) (async)
mount$bind(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000640)=ANY=[@ANYBLOB="00fbfb0000a98ee578cfd342e6a2de09740b5a14b4b738ac67a1e61894bb26734d9633c382b8e78a1f86ca3ae409493b4bfe01c1f0ee495ad102ad7261cab29a4fbdebf37e1b1027e3c3c6c064677e221f64ded3d93609d25479419d3ca2d792f18ec7b749fda1bc147d7db97be265f5ef0b6a7eec54c990834ff45d8d03c20b2f0ca2f10f2347fccb50439d43bc00e1be97b371dd9f7b114911ad9e7640d6060a87c96235cca14c924da66ec669c94b26f0110d4b1b2b92400e9635d07bdd3f10854034"], 0xfb, 0x0) (async)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000640)=ANY=[@ANYBLOB="00fbfb0000a98ee578cfd342e6a2de09740b5a14b4b738ac67a1e61894bb26734d9633c382b8e78a1f86ca3ae409493b4bfe01c1f0ee495ad102ad7261cab29a4fbdebf37e1b1027e3c3c6c064677e221f64ded3d93609d25479419d3ca2d792f18ec7b749fda1bc147d7db97be265f5ef0b6a7eec54c990834ff45d8d03c20b2f0ca2f10f2347fccb50439d43bc00e1be97b371dd9f7b114911ad9e7640d6060a87c96235cca14c924da66ec669c94b26f0110d4b1b2b92400e9635d07bdd3f10854034"], 0xfb, 0x0)